chore(deps): update postgres docker tag to v18

chore: upgrade digest pins to real version tags
Registry scan found version tags matching the running digests: mealie v3.28.0, glances 4.5.7, fileflows 26.09, postgres-exporter v0.20.1, cadvisor v0.55.1, teslacamplayer 2024.8.11.923-ig37. Images without usable version tags stay digest-pinned (syncthing, homepage, telegraf, plex-exporter, sockpuppetbrowser, biggetje).
2026-10-02 20:03:37 +00:00 · 2026-10-02 17:00:19 +02:00 · 2026-10-02 16:49:12 +02:00 · 2026-10-02 16:36:46 +02:00 · 2026-10-02 16:35:09 +02:00 · 2026-10-02 16:23:47 +02:00
34 changed files with 775 additions and 1308 deletions
@@ -0,0 +1,8 @@
+# Default ignored files
+/shelf/
+/workspace.xml
+# Editor-based HTTP Client requests
+/httpRequests/
+# Datasource local storage ignored files
+/dataSources/
+/dataSources.local.xml
@@ -0,0 +1,5 @@
+<component name="ProjectCodeStyleConfiguration">
+  <state>
+    <option name="PREFERRED_PROJECT_CODE_STYLE" value="Default" />
+  </state>
+</component>
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="CIDR_MODULE" version="4">
+  <component name="NewModuleRootManager" inherit-compiler-output="true">
+    <exclude-output />
+    <content url="file://$MODULE_DIR$" />
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+</module>
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="DeveloperToolsToolWindowSettingsV1" lastSelectedContentNodeId="uuid-generator" pluginVersion="7.1.0">
+    <developerToolsConfigurations />
+  </component>
+</project>
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="GoogleJavaFormatSettings">
+    <option name="enabled" value="false" />
+  </component>
+</project>
@@ -0,0 +1,5 @@
+<project version="4">
+  <component name="ProjectRootManager" version="2" languageLevel="JDK_11" project-jdk-name="JDK 11" project-jdk-type="JavaSDK">
+    <output url="file://$PROJECT_DIR$/out" />
+  </component>
+</project>
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/compose-files.iml" filepath="$PROJECT_DIR$/.idea/compose-files.iml" />
+    </modules>
+  </component>
+</project>
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="" vcs="Git" />
+  </component>
+</project>
@@ -0,0 +1 @@
+[]
@@ -0,0 +1 @@
+3.0
@@ -0,0 +1,15 @@
+{
+  "mcpServers": {
+    "komodo": {
+      "type": "http",
+      "url": "https://komodo-mcp.arnoutvw.nl"
+    },
+    "unraid-mcp": {
+      "type": "http",
+      "url": "http://192.168.10.144:8043/mcp",
+      "headers": {
+        "Authorization": "Bearer f359c9dbb97d44d98278e0a69e81190706225a4ab7b947ee149b4be470c40763"
+      }
+    }
+  }
+}
@@ -21,9 +21,9 @@ services:
      - "OIDC_REMEMBER_ME=true"
      - "HOST_HOSTNAME=Atlas"
      - "OIDC_CLIENT_ID=693c1663-b048-4720-9a32-e370a189d75e"
-      - "OIDC_CLIENT_SECRET=mUczp7Af50iOgdB8mIm7CkhzVrHyOmVT"
+      - "OIDC_CLIENT_SECRET=${MEALIE_OIDC_CLIENT_SECRET}"
      - "OIDC_AUTO_REDIRECT=false"
-      - "OPENAI_API_KEY=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"
+      - "OPENAI_API_KEY=${MEALIE_OPENAI_API_KEY}"
      - "OPENAI_SEND_DATABASE_DATA=false"
      - "OPENAI_WORKERS=1"
      - "PATH=/opt/mealie/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
@@ -47,7 +47,7 @@ services:

    hostname: "a873ad987327"

-    image: "ghcr.io/mealie-recipes/mealie:latest"
+    image: "ghcr.io/mealie-recipes/mealie:v3.28.0"

    ipc: "private"

@@ -79,6 +79,8 @@ services:
    ports:
      - "9925:9000/tcp"

+    restart: "unless-stopped"
+
    volumes:
      - "/mnt/user/appdata/mealiev1:/app/data"

@@ -95,7 +97,7 @@ services:

    environment:
      - "PANGOLIN_ENDPOINT=https://pangolin.arnoutvw.nl"
-      - "NEWT_SECRET=cminmfb4uou57fpo213xkx2th038awgczbpbz4gh1gv2b25k"
+      - "NEWT_SECRET=${NEWT_SECRET}"
      - "DOCKER_SOCKET=/var/run/docker.sock"
      - "TZ=Europe/Berlin"
      - "HOST_HOSTNAME=Atlas"
@@ -110,7 +112,7 @@ services:

    hostname: "e6ea728334b3"

-    image: "fosrl/newt"
+    image: "fosrl/newt:1.12.5"

    ipc: "private"

@@ -161,7 +163,7 @@ services:
      - "TZ=Europe/Berlin"
      - "PANGOLIN_ENDPOINT=https://pangolin-secondary.arnoutvw.nl"
      - "NEWT_ID=r3z5tzmrso6sm2v"
-      - "NEWT_SECRET=h4ry5nuqqpbye4udfc0kq6efswnnwsfd6k4wk31a59tf2nyi"
+      - "NEWT_SECRET=${NEWT_SECRET_SECONDARY}"
      - "HOST_OS=Unraid"
      - "HOST_HOSTNAME=Atlas"
      - "HOST_CONTAINERNAME=Newt-secondary"
@@ -174,7 +176,7 @@ services:

    hostname: "62a85da202e1"

-    image: "fosrl/newt"
+    image: "fosrl/newt:1.12.5"

    ipc: "private"

@@ -250,21 +252,21 @@ services:

    hostname: "0cfc3f7274c5"

-    image: "binwiederhier/ntfy"
+    image: "binwiederhier/ntfy:v2.28.0"

    ipc: "private"

    labels:
      cloudflare.tunnel.enable: "true"
      cloudflare.tunnel.hostname: "ntfy.arnoutvw.nl"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/binwiederhier/ntfy/main/docs/static/img/ntfy.png"
+      net.unraid.docker.icon: "https://raw.githubusercontent.com/binwiederhier/ntfy:v2.28.0/main/docs/static/img/ntfy.png"
      net.unraid.docker.managed: "dockerman"
      net.unraid.docker.webui: "http://[IP]:[PORT:80]/"
      org.opencontainers.image.authors: "philipp.heckel@gmail.com"
      org.opencontainers.image.description: "Send push notifications to your phone or desktop using PUT/POST"
      org.opencontainers.image.documentation: "https://docs.ntfy.sh/"
      org.opencontainers.image.licenses: "Apache-2.0, GPL-2.0"
-      org.opencontainers.image.source: "https://github.com/binwiederhier/ntfy"
+      org.opencontainers.image.source: "https://github.com/binwiederhier/ntfy:v2.28.0"
      org.opencontainers.image.title: "ntfy"
      org.opencontainers.image.url: "https://ntfy.sh/"
      org.opencontainers.image.vendor: "Philipp C. Heckel"
@@ -321,7 +323,7 @@ services:

    hostname: "bd2d3d12e159"

-    image: "bellamy/wallos:latest"
+    image: "bellamy/wallos:5.8.3"

    ipc: "private"

@@ -369,7 +371,7 @@ services:
      - "/entrypoint.sh"

    environment:
-      - "DB_PASSWORD=ferdium"
+      - "DB_PASSWORD=${FERDIUM_DB_PASSWORD}"
      - "IS_DASHBOARD_ENABLED=true"
      - "CONNECT_WITH_FRANZ=true"
      - "NODE_ENV=development"
@@ -382,7 +384,7 @@ services:
      - "DB_DATABASE=ferdium"
      - "DB_SSL=false"
      - "HOST_HOSTNAME=Atlas"
-      - "MAIL_PASSWORD=6N(BzRLq3w"
+      - "MAIL_PASSWORD=${FERDIUM_MAIL_PASSWORD}"
      - "IS_CREATION_ENABLED=true"
      - "MAIL_USERNAME=arnoutvw@gmail.com"
      - "HOST_OS=Unraid"
@@ -402,7 +404,7 @@ services:

    hostname: "6b89f6fcb6ec"

-    image: "ferdium/ferdium-server:1.3.16"
+    image: "ferdium/ferdium-server:2.0.13"

    ipc: "private"

@@ -470,7 +472,7 @@ services:

    hostname: "ec28a6ad1d69"

-    image: "ghcr.io/gethomepage/homepage:latest"
+    image: "ghcr.io/gethomepage/homepage@sha256:643bd0be730d40f69d58028a55d1a896739333e8815786df42bc97f109ecbe61"

    ipc: "private"

@@ -535,8 +537,8 @@ services:
      - "notification_type=Telegram"
      - "directory_permissions=777"
      - "HOST_CONTAINERNAME=icloudpd"
-      - "prowl_api_key=5e1f3494f0d4e7cbc2ada051e1f596a4cd7de341"
-      - "telegram_token=6324506583:AAEW4EwQwRdfNt9U_1esT78ZdKOFRQhbm34"
+      - "prowl_api_key=${ICLOUDPD_PROWL_API_KEY}"
+      - "telegram_token=${ICLOUDPD_TELEGRAM_TOKEN}"
      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
      - "XDG_DATA_HOME=/config"
      - "ENV=/etc/profile"
@@ -544,7 +546,7 @@ services:

    hostname: "d44e9d0b7873"

-    image: "boredazfcuk/icloudpd"
+    image: "boredazfcuk/icloudpd:1.0.1380_06-09-2026"

    ipc: "private"

@@ -561,6 +563,8 @@ services:

    network_mode: "bridge"

+    restart: "unless-stopped"
+
    volumes:
      - "/mnt/user/appdata/icloudpd:/config"
      - "/mnt/user/photos:/home/user/iCloud"
@@ -568,64 +572,6 @@ services:
    working_dir: "/"


-  icloudpd-web:
-
-    container_name: "icloudpd-web"
-
-    entrypoint:
-      - "docker-entrypoint.sh"
-
-    environment:
-      - "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "LANG=C.UTF-8"
-      - "GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305"
-      - "PYTHON_VERSION=3.12.8"
-      - "PYTHON_SHA256=c909157bb25ec114e5869124cc2a9c4a4d4c1e957ca4ff553f1edc692101154e"
-      - "HOST=0.0.0.0"
-      - "PORT=5000"
-      - "DATA_DIR=/data"
-
-    hostname: "be7ba0135864"
-
-    image: "spicadust/icloudpd-web"
-
-    ipc: "private"
-
-    labels:
-      com.docker.compose.config-hash: "94b9c90cebf727cfe2ea7a7649ca1659e21bd89740bc24ef69cdfe71c2c9a202"
-      com.docker.compose.container-number: "1"
-      com.docker.compose.depends_on: ""
-      com.docker.compose.image: "sha256:d685a93957a06a6908567c96e5381a2e6d93d3cf88f76403e1ba79fa18fb4271"
-      com.docker.compose.oneoff: "False"
-      com.docker.compose.project: "immich"
-      com.docker.compose.project.config_files: "/etc/komodo/repos/compose-files/immich/compose.yaml"
-      com.docker.compose.project.working_dir: "/etc/komodo/repos/compose-files/immich"
-      com.docker.compose.replace: "icloudpd-web"
-      com.docker.compose.service: "icloudpd-web"
-      com.docker.compose.version: "2.39.4"
-      traefik.http.routers.icloudpd.rule: "Host(`icloudpd.arnoutvw.nl`)"
-
-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
-
-    network_mode: "bridge"
-
-    ports:
-      - "8695:5000/tcp"
-
-    user: "appuser"
-
-    volumes:
-      - "/mnt/user/icloudpd:/app"
-      - "8a95a9abe8cd47162994016fe971834383dad360e0e46b598d9d21d341dd1e77:/data"
-      - "bd46e56cceb787eb943228af9b60f6bf0502d06348bf21fca40a772cd5caf30a:/downloads"
-
-    working_dir: "/home/appuser"
-
-
  paperless-ng:

    container_name: "paperless-ng"
@@ -643,7 +589,7 @@ services:
      - "PAPERLESS_REDIS=redis://192.168.10.144:6379"
      - "PAPERLESS_TIME_ZONE=Europe/Amsterdam"
      - "PAPERLESS_IGNORE_DATES="
-      - "PAPERLESS_SECRET_KEY=e11fl1oa-*ytql8p)(06fbj4ukrlo+n7k&q5+$$1md7i+mge=ee"
+      - "PAPERLESS_SECRET_KEY=${PAPERLESS_SECRET_KEY}"
      - "HOST_OS=Unraid"
      - "HOST_HOSTNAME=Atlas"
      - "PAPERLESS_OCR_LANGUAGE=nld"
@@ -666,7 +612,7 @@ services:

    hostname: "ec5d0c997a14"

-    image: "ghcr.io/paperless-ngx/paperless-ngx:latest"
+    image: "ghcr.io/paperless-ngx/paperless-ngx:3.2.1"

    ipc: "private"

@@ -699,6 +645,8 @@ services:
    ports:
      - "8000:8000/tcp"

+    restart: "unless-stopped"
+
    volumes:
      - "/mnt/user/Plex/paperless/consume:/usr/src/paperless/consume"
      - "/mnt/user/Plex/paperless/export:/usr/src/paperless/export"
@@ -724,7 +672,7 @@ services:
      - "PAPERLESS_CONSUMER_POLLING=0"
      - "USERMAP_GID=100"
      - "PAPERLESS_REDIS=redis://192.168.10.144:6379"
-      - "PAPERLESS_SECRET_KEY=e11fl1oa-*ytql8p)(06fbj4ukrlo+n7k&q5+$$1md7i+mge=ee"
+      - "PAPERLESS_SECRET_KEY=${PAPERLESS_SECRET_KEY}"
      - "PAPERLESS_OCR_LANGUAGE=deu"
      - "HOST_OS=Unraid"
      - "HOST_HOSTNAME=Atlas"
@@ -750,7 +698,7 @@ services:

    hostname: "fd9391e47c23"

-    image: "ghcr.io/paperless-ngx/paperless-ngx"
+    image: "ghcr.io/paperless-ngx/paperless-ngx:3.2.1"

    ipc: "private"

@@ -783,6 +731,8 @@ services:
    ports:
      - "8005:8000/tcp"

+    restart: "unless-stopped"
+
    volumes:
      - "/mnt/user/appdata/paperless-ngx/data:/usr/src/paperless/data"
      - "/mnt/user/papermerge-kirstin/media:/usr/src/paperless/media"
@@ -792,69 +742,66 @@ services:
    working_dir: "/usr/src/paperless/src/"


-  photon:
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#   photon:
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    command:
-      - "uv"
-      - "run"
-      - "-m"
-      - "src.process_manager"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     container_name: "photon"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    container_name: "photon"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     environment:
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#       - "UPDATE_STRATEGY=SEQUENTIAL"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#       - "UPDATE_INTERVAL=720h"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#       - "TZ=Europe/Berlin"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    entrypoint:
-      - "/bin/sh"
-      - "entrypoint.sh"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     image: "rtuszik/photon-docker:latest"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    environment:
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=photon"
-      - "UPDATE_STRATEGY=SEQUENTIAL"
-      - "UPDATE_INTERVAL=720h"
-      - "TZ=Europe/Berlin"
-      - "PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "JAVA_HOME=/opt/java/openjdk"
-      - "LANG=en_US.UTF-8"
-      - "LANGUAGE=en_US:en"
-      - "LC_ALL=en_US.UTF-8"
-      - "JAVA_VERSION=jdk-21.0.9+10"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     ipc: "private"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    hostname: "df06e527b77c"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     logging:
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#       driver: "json-file"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#       options:
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#         max-file: "1"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#         max-size: "50m"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    image: "rtuszik/photon-docker:latest"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     network_mode: "bridge"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    ipc: "private"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     ports:
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#       - "2322:2322/tcp"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    labels:
-      net.unraid.docker.icon: "https://photon.komoot.io/static/img/photon_logo.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:2322]/"
-      org.opencontainers.image.description: "Unofficial docker image for the Photon Geocoder"
-      org.opencontainers.image.documentation: "https://github.com/rtuszik/photon-docker#readme"
-      org.opencontainers.image.ref.name: "ubuntu"
-      org.opencontainers.image.source: "https://github.com/rtuszik/photon-docker"
-      org.opencontainers.image.title: "photon-docker"
-      org.opencontainers.image.url: "https://github.com/rtuszik/photon-docker"
-      org.opencontainers.image.version: "24.04"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     restart: "unless-stopped"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     volumes:
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#       - "/mnt/user/development/photon:/photon/photon_data"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.

-    mac_address: "ee:2c:d1:6a:b5:c0"
-
-    network_mode: "bridge"
-
-    ports:
-      - "2322:2322/tcp"
-
-    volumes:
-      - "/mnt/user/development/photon:/photon/photon_data"
-
-    working_dir: "/photon"
+# OOS: photon-docker image layout changed (geen uv meer); OSM-update wil 153GB temp — 137GB beschikbaar. Activeren na disk-keuze.
+#     working_dir: "/photon"


  syncthing:
@@ -883,7 +830,7 @@ services:

    hostname: "e15633021566"

-    image: "linuxserver/syncthing"
+    image: "linuxserver/syncthing@sha256:26cfac865d0924afc7f1e34a65e34e41c22f7b6b61d0c23a6aaebad13104b113"

    ipc: "private"

@@ -924,6 +871,8 @@ services:
      - "22000:22000/tcp"
      - "8384:8384/tcp"

+    restart: "unless-stopped"
+
    volumes:
      - "/mnt/user/Backups/syncthing:/sync"
      - "/mnt/user/appdata/syncthing:/config"
@@ -1,6 +1,6 @@
 services:
  changedetection:
-    image: ghcr.io/dgtlmoon/changedetection.io:0.55.7
+    image: ghcr.io/dgtlmoon/changedetection.io:0.60.8
    container_name: changedetection
    hostname: changedetection
    network_mode: "bridge"
@@ -111,7 +111,7 @@ services:
    # RECOMMENDED FOR FETCHING PAGES WITH CHROME, be sure to enable the "PLAYWRIGHT_DRIVER_URL" env variable in the main changedetection container
  browser-sockpuppet-chrome:
    hostname: browser-sockpuppet-chrome
-    image: dgtlmoon/sockpuppetbrowser:latest
+    image: dgtlmoon/sockpuppetbrowser@sha256:1d8f72d2ce2085faed4232e5ae1e65c02efe5b831a18e127829b267c260b4fb2
    network_mode: bridge
    cap_add:
      - SYS_ADMIN
@@ -1,121 +1,65 @@
 version: "3.6"
 services:
  Postgres14:
-    command:
-      - "postgres"
    container_name: "Postgres14"
    entrypoint:
      - "docker-entrypoint.sh"
+    command:
+      - "postgres"
    environment:
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=Postgres14"
      - "POSTGRES_PASSWORD=postgres"
      - "POSTGRES_USER=postgres"
      - "POSTGRES_DB=postgres"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "GOSU_VERSION=1.19"
-      - "LANG=en_US.utf8"
-      - "PG_MAJOR=14"
-      - "PG_VERSION=14.22"
-      - "PG_SHA256=f57938ad30067077720277f6d7db05aafc07d1545efd2ed82f199ba828a7ad34"
-      - "DOCKER_PG_LLVM_DEPS=llvm19-dev \t\tclang19"
      - "PGDATA=/var/lib/postgresql/data"
-    hostname: "c3a5bda48654"
    image: "postgres:18-alpine"
    ipc: "private"
-    labels:
-      net.unraid.docker.icon: "https://github.com/juusujanar/unraid-templates/raw/master/img/PostgreSQL-logo.png"
-      net.unraid.docker.managed: "dockerman"
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-    mac_address: "86:3e:cf:e7:e3:80"
    network_mode: "bridge"
    ports:
      - "5433:5432/tcp"
+    restart: "unless-stopped"
    volumes:
      - "/mnt/cache/appdata/postgres14:/var/lib/postgresql/data"
    working_dir: "/"


  mariadb:
-
    container_name: "mariadb"
-
    entrypoint:
      - "/init"
-
    environment:
-      - "HOST_OS=Unraid"
-      - "HOST_CONTAINERNAME=mariadb"
      - "MYSQL_DATABASE=wordpress"
-      - "MYSQL_PASSWORD=cDon7wofuJXtFsrWn2TfAhqA"
+      - "MYSQL_PASSWORD=${MARIADB_PASSWORD}"
+      - "MYSQL_USER=wordpress"
+      - "MYSQL_ROOT_PASSWORD=${MARIADB_ROOT_PASSWORD}"
      - "UMASK=022"
      - "TZ=Europe/Berlin"
-      - "HOST_HOSTNAME=Atlas"
-      - "MYSQL_ROOT_PASSWORD=BdUXcTAorkV7MD4UiRQAPHUj"
-      - "MYSQL_USER=wordpress"
-      - "REMOTE_SQL=http://URL1/your.sql,https://URL2/your.sql"
      - "PUID=99"
      - "PGID=100"
-      - "PATH=/lsiopy/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "PS1=$$(whoami)@$$(hostname):$$(pwd)\\$$ "
-      - "HOME=/root"
-      - "TERM=xterm"
+      - "MYSQL_DIR=/config"
+      - "DATADIR=/config/databases"
      - "S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0"
      - "S6_VERBOSITY=1"
      - "S6_STAGE2_HOOK=/docker-mods"
-      - "VIRTUAL_ENV=/lsiopy"
      - "LSIO_FIRST_PARTY=true"
-      - "MYSQL_DIR=/config"
-      - "DATADIR=/config/databases"
-
-    hostname: "e754e2dd728b"
-
-    image: "lscr.io/linuxserver/mariadb"
-
+    image: "lscr.io/linuxserver/mariadb:11.8.8-r0-ls233"
    ipc: "private"
-
-    labels:
-      build_version: "Linuxserver.io version:- 11.4.10-r0-ls215 Build-date:- 2026-05-05T09:33:04+00:00"
-      maintainer: "thelamer,nemchik"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/mariadb-logo.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:3306]"
-      org.opencontainers.image.authors: "linuxserver.io"
-      org.opencontainers.image.created: "2026-05-05T09:33:04+00:00"
-      org.opencontainers.image.description: "[Mariadb](https://mariadb.org/) is one of the most popular\
-        \ database servers. Made by the original developers of MySQL."
-      org.opencontainers.image.documentation: "https://docs.linuxserver.io/images/docker-mariadb"
-      org.opencontainers.image.licenses: "GPL-3.0-only"
-      org.opencontainers.image.ref.name: "a5d07132533a00adf552ba46409433c25a9b0c77"
-      org.opencontainers.image.revision: "a5d07132533a00adf552ba46409433c25a9b0c77"
-      org.opencontainers.image.source: "https://github.com/linuxserver/docker-mariadb"
-      org.opencontainers.image.title: "Mariadb"
-      org.opencontainers.image.url: "https://github.com/linuxserver/docker-mariadb/packages"
-      org.opencontainers.image.vendor: "linuxserver.io"
-      org.opencontainers.image.version: "11.4.10-r0-ls215"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "a6:06:8a:c4:05:ea"
-
    network_mode: "bridge"
-
    ports:
      - "3306:3306/tcp"
-
+    restart: "unless-stopped"
    volumes:
      - "/mnt/user/appdata/mariadb:/config"
-
    working_dir: "/"


@@ -127,35 +71,70 @@ services:
      - "PGADMIN_CONFIG_AUTHENTICATION_SOURCES=['oauth2', 'internal']"
      - "PGADMIN_LISTEN_ADDRESS=0.0.0.0"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=pgadmin4"
      - "PGADMIN_DEFAULT_EMAIL=arnoutvw@gmail.com"
-      - "PGADMIN_DEFAULT_PASSWORD=Xo48Yak8"
-      - "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "PYTHON_VERSION=3.14.4"
-      - "PYTHON_SHA256=d923c51303e38e249136fc1bdf3568d56ecb03214efdef48516176d3d7faaef8"
-      - "PYTHONPATH=/pgadmin4"
-    hostname: "9bcce603f7ed"
-    image: "dpage/pgadmin4"
+      - "PGADMIN_DEFAULT_PASSWORD=${PGADMIN_PASSWORD}"
+    image: "dpage/pgadmin4:9.18"
    ipc: "private"
-    labels:
-      net.unraid.docker.icon: "https://github.com/FoxxMD/unraid-docker-templates/raw/master/icons/pgadmin4.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:80]/"
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-    mac_address: "96:15:d1:f2:92:c1"
    network_mode: "bridge"
    ports:
      - "8792:80/tcp"
    user: "5050"
+    restart: "unless-stopped"
    volumes:
      - "/mnt/cache/appdata/pgadmin4/config_local.py:/pgadmin4/config_local.py"
      - "/mnt/user/appdata/pgadmin4:/var/lib/pgadmin"
    working_dir: "/pgadmin4"


+  phpmyadmin:
+    container_name: "phpmyadmin"
+    entrypoint:
+      - "/init"
+    environment:
+      - "PMA_ARBITRARY=1"
+      - "PMA_ABSOLUTE_URI=http://192.168.10.144:7780"
+      - "PHP_INI_SCAN_DIR=:/config/php"
+      - "PUID=99"
+      - "PGID=100"
+      - "UMASK=022"
+      - "TZ=Europe/Berlin"
+      - "MAX_EXECUTION_TIME=600"
+      - "MEMORY_LIMIT=512M"
+      - "UPLOAD_LIMIT=8192K"
+    image: "lscr.io/linuxserver/phpmyadmin:5.2.3-ls252"
+    ipc: "private"
+    logging:
+      driver: "json-file"
+      options:
+        max-file: "1"
+        max-size: "50m"
+    network_mode: "bridge"
+    ports:
+      - "7780:80/tcp"
+    restart: "unless-stopped"
+    volumes:
+      - "/mnt/user/appdata/phpmyadmin:/config"
+    working_dir: "/"
+
+
+  Redis:
+    container_name: "Redis"
+    command:
+      - "redis-server"
+    environment:
+      - "TZ=Europe/Berlin"
+    image: "redis:8.10.2"
+    logging:
+      driver: "json-file"
+      options:
+        max-file: "1"
+        max-size: "50m"
+    network_mode: "bridge"
+    ports:
+      - "6379:6379/tcp"
+    restart: "unless-stopped"
@@ -38,7 +38,7 @@ services:
    labels:
      - traefik.constraint=proxy-public
      - traefik.http.routers.nginx.rule=Host(`dawarich.arnoutvw.nl`)
-    image: freikin/dawarich:1.9.2
+    image: freikin/dawarich:1.15.3
    container_name: dawarich_app
    network_mode: bridge
    volumes:
@@ -98,7 +98,7 @@ services:
          cpus: '0.50'    # Limit CPU usage to 50% of one core
          memory: '4G'    # Limit memory usage to 4GB
  dawarich_sidekiq:
-    image: freikin/dawarich:1.9.2
+    image: freikin/dawarich:1.15.3
    container_name: dawarich_sidekiq
    volumes:
      - dawarich_public:/var/app/public
@@ -31,7 +31,7 @@ services:
      - "PGID=100"
      - "TZ=Europe/Berlin"
      - "HOST_OS=Unraid"
-    image: "binhex/arch-radarr:6.2.1.10461-1-01"
+    image: "binhex/arch-radarr:6.4.4.10685-1-01"
    labels:
      cloudflare.tunnel.access.policy: "sabnzbd"
      cloudflare.tunnel.enable: "true"
@@ -51,15 +51,15 @@ services:
      pangolin.proxy-resources.radarr.targets[0].healthcheck.port: 7878
      pangolin.proxy-resources.radarr.targets[0].healthcheck.enabled: true
      pangolin.proxy-resources.radarr.auth.sso-enabled: true
-      pangolin.proxy-resources.radarr.rules[0].match: country
-      pangolin.proxy-resources.radarr.rules[0].action: pass
-      pangolin.proxy-resources.radarr.rules[0].value: NL
-      pangolin.proxy-resources.radarr.rules[1].match: country
-      pangolin.proxy-resources.radarr.rules[1].action: pass
-      pangolin.proxy-resources.radarr.rules[1].value: DE
-      pangolin.proxy-resources.radarr.rules[2].match: ip
+      pangolin.proxy-resources.radarr.rules[0].match: region
+      pangolin.proxy-resources.radarr.rules[0].action: allow
+      pangolin.proxy-resources.radarr.rules[0].value: EU
+      pangolin.proxy-resources.radarr.rules[1].match: ip
+      pangolin.proxy-resources.radarr.rules[1].action: allow
+      pangolin.proxy-resources.radarr.rules[1].value: 172.21.0.1
+      pangolin.proxy-resources.radarr.rules[2].match: path
      pangolin.proxy-resources.radarr.rules[2].action: allow
-      pangolin.proxy-resources.radarr.rules[2].value: 172.21.0.1
+      pangolin.proxy-resources.radarr.rules[2].value: /api/*
      pangolin.proxy-resources.radarr.rules[3].match: country
      pangolin.proxy-resources.radarr.rules[3].action: deny
      pangolin.proxy-resources.radarr.rules[3].value: ALL
@@ -80,7 +80,7 @@ services:
      - "HOST_HOSTNAME=Atlas"
      - "HOST_CONTAINERNAME=binhex-sabnzbd"
      - "UMASK=000"
-    image: "binhex/arch-sabnzbd:5.0.1-1-02"
+    image: "binhex/arch-sabnzbd:5.1.3-1-01"
    labels:
      cloudflare.tunnel.access.policy: "sabnzbd"
      cloudflare.tunnel.enable: "true"
@@ -101,18 +101,15 @@ services:
      pangolin.proxy-resources.sabnzbd.targets[0].healthcheck.port: 8080
      pangolin.proxy-resources.sabnzbd.targets[0].healthcheck.enabled: true
      pangolin.proxy-resources.sabnzbd.auth.sso-enabled: true
-      pangolin.proxy-resources.sabnzbd.rules[0].match: country
-      pangolin.proxy-resources.sabnzbd.rules[0].action: pass
-      pangolin.proxy-resources.sabnzbd.rules[0].value: NL
-      pangolin.proxy-resources.sabnzbd.rules[1].match: country
-      pangolin.proxy-resources.sabnzbd.rules[1].action: pass
-      pangolin.proxy-resources.sabnzbd.rules[1].value: DE
-      pangolin.proxy-resources.sabnzbd.rules[2].match: ip
-      pangolin.proxy-resources.sabnzbd.rules[2].action: allow
-      pangolin.proxy-resources.sabnzbd.rules[2].value: 172.21.0.1
-      pangolin.proxy-resources.sabnzbd.rules[3].match: country
-      pangolin.proxy-resources.sabnzbd.rules[3].action: deny
-      pangolin.proxy-resources.sabnzbd.rules[3].value: ALL
+      pangolin.proxy-resources.sabnzbd.rules[0].match: region
+      pangolin.proxy-resources.sabnzbd.rules[0].action: allow
+      pangolin.proxy-resources.sabnzbd.rules[0].value: EU
+      pangolin.proxy-resources.sabnzbd.rules[1].match: ip
+      pangolin.proxy-resources.sabnzbd.rules[1].action: allow
+      pangolin.proxy-resources.sabnzbd.rules[1].value: 172.21.0.1
+      pangolin.proxy-resources.sabnzbd.rules[2].match: country
+      pangolin.proxy-resources.sabnzbd.rules[2].action: deny
+      pangolin.proxy-resources.sabnzbd.rules[2].value: ALL
    network_mode: "bridge"
    ports:
      - "8080:8080/tcp"
@@ -133,7 +130,7 @@ services:
      - "PGID=100"
      - "HOST_HOSTNAME=Atlas"
      - "HOST_CONTAINERNAME=binhex-sonarr"
-    image: "binhex/arch-sonarr:4.0.17.2952-1-02"
+    image: "binhex/arch-sonarr:4.0.20.3014-1-01"
    labels:
      cloudflare.tunnel.enable: "true"
      cloudflare.tunnel.service: "http://192.168.10.144:8989"
@@ -152,15 +149,15 @@ services:
      pangolin.proxy-resources.sonarr.targets[0].healthcheck.port: 8989
      pangolin.proxy-resources.sonarr.targets[0].healthcheck.enabled: true
      pangolin.proxy-resources.sonarr.auth.sso-enabled: true
-      pangolin.proxy-resources.sonarr.rules[0].match: country
-      pangolin.proxy-resources.sonarr.rules[0].action: pass
-      pangolin.proxy-resources.sonarr.rules[0].value: NL
-      pangolin.proxy-resources.sonarr.rules[1].match: country
-      pangolin.proxy-resources.sonarr.rules[1].action: pass
-      pangolin.proxy-resources.sonarr.rules[1].value: DE
-      pangolin.proxy-resources.sonarr.rules[2].match: ip
+      pangolin.proxy-resources.sonarr.rules[0].match: region
+      pangolin.proxy-resources.sonarr.rules[0].action: allow
+      pangolin.proxy-resources.sonarr.rules[0].value: EU
+      pangolin.proxy-resources.sonarr.rules[1].match: ip
+      pangolin.proxy-resources.sonarr.rules[1].action: allow
+      pangolin.proxy-resources.sonarr.rules[1].value: 172.21.0.1
+      pangolin.proxy-resources.sonarr.rules[2].match: path
      pangolin.proxy-resources.sonarr.rules[2].action: allow
-      pangolin.proxy-resources.sonarr.rules[2].value: 172.21.0.1
+      pangolin.proxy-resources.sonarr.rules[2].value: /api/*
      pangolin.proxy-resources.sonarr.rules[3].match: country
      pangolin.proxy-resources.sonarr.rules[3].action: deny
      pangolin.proxy-resources.sonarr.rules[3].value: ALL
@@ -198,28 +195,6 @@ services:
    network_mode: "bridge"
    volumes:
      - "/mnt/cache/appdata/Varken:/config"
-  hydra2:
-    container_name: "hydra2"
-    environment:
-      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=hydra2"
-      - "UMASK=000"
-      - "PUID=99"
-      - "PGID=100"
-    image: "lscr.io/linuxserver/nzbhydra2:v7.16.3-ls62"
-    restart: "unless-stopped"
-    ports:
-      - "5076:5076"
-    network_mode: "bridge"
-    labels:
-      maintainer: "MDHMatt"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/benderstwin/docker-templates/master/images/hydra2.png"
-    volumes:
-      - "/mnt/cache/appdata/hydra2:/config"
-      - "/mnt/cache/sabnzbd/watched:/data"
-      - "/etc/localtime:/etc/localtime:ro"

  spotweb:
    container_name: "spotweb"
@@ -234,7 +209,7 @@ services:
      - "TZ=Europe/Berlin"
      - "SPOTWEB_DB_HOST=192.168.10.144"
      - "SPOTWEB_DB_NAME=spotweb"
-    image: "jgeusebroek/spotweb:20260613"
+    image: "jgeusebroek/spotweb:20260919"
    labels:
      Author: "Jeroen Geusebroek <me@jeroengeusebroek.nl>"
      net.unraid.docker.icon: "https://raw.githubusercontent.com/riffsphereha/Unraid-Templates/main/spotweb/Spotweb.webp"
@@ -282,7 +257,7 @@ services:
      - "HOST_OS=Unraid"
      - "HOST_HOSTNAME=Atlas"
      - "HOST_CONTAINERNAME=bazarr"
-    image: "lscr.io/linuxserver/bazarr:v1.5.6-ls344"
+    image: "lscr.io/linuxserver/bazarr:v1.6.0-ls357"
    labels:
      maintainer: "chbmb"
      net.unraid.docker.icon: "https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/bazarr.png"
@@ -316,7 +291,7 @@ services:
      - "TZ=Europe/Berlin"
      - "HOST_OS=Unraid"
      - "HOST_HOSTNAME=Atlas"
-    image: "ghcr.io/thecfu/scraparr:3.0.3"
+    image: "ghcr.io/thecfu/scraparr:3.2.0"
    labels:
      net.unraid.docker.icon: "https://raw.githubusercontent.com/jordan-dalby/unraidtemplates/refs/heads/main/images/scraparr.png"
      net.unraid.docker.webui: "http://[IP]:[PORT:7100]/metrics"
@@ -371,7 +346,7 @@ services:
      - "VPN_PIA_DIP_TOKEN=no"
      - "VPN_PIA_PORT_FORWARD_PERSIST=false"
      - "WEBUI_PORTS=9696/tcp,9696/udp"
-    image: "ghcr.io/hotio/prowlarr:release-2.3.5.5327"
+    image: "ghcr.io/hotio/prowlarr:release-2.5.2.5491"
    labels:
      net.unraid.docker.icon: "https://hotio.dev/webhook-avatars/prowlarr.png"
      net.unraid.docker.webui: "http://[IP]:[PORT:9696]"
@@ -426,7 +401,7 @@ services:
  #    volumes:
  #      - "/mnt/user/appdata/overseerr:/config"
  seerr:
-    image: ghcr.io/seerr-team/seerr:v3.3.0
+    image: ghcr.io/seerr-team/seerr:v3.5.0
    init: true
    container_name: seerr
    environment:
@@ -459,23 +434,20 @@ services:
      pangolin.proxy-resources.overseerr.targets[0].healthcheck.port: 5055
      pangolin.proxy-resources.overseerr.targets[0].healthcheck.enabled: true
      pangolin.proxy-resources.overseerr.auth.sso-enabled: false
-      pangolin.proxy-resources.overseerr.rules[0].match: country
+      pangolin.proxy-resources.overseerr.rules[0].match: region
      pangolin.proxy-resources.overseerr.rules[0].action: allow
-      pangolin.proxy-resources.overseerr.rules[0].value: NL
-      pangolin.proxy-resources.overseerr.rules[1].match: country
+      pangolin.proxy-resources.overseerr.rules[0].value: EU
+      pangolin.proxy-resources.overseerr.rules[1].match: ip
      pangolin.proxy-resources.overseerr.rules[1].action: allow
-      pangolin.proxy-resources.overseerr.rules[1].value: DE
-      pangolin.proxy-resources.overseerr.rules[2].match: ip
-      pangolin.proxy-resources.overseerr.rules[2].action: allow
-      pangolin.proxy-resources.overseerr.rules[2].value: 172.21.0.1
-      pangolin.proxy-resources.overseerr.rules[3].match: country
-      pangolin.proxy-resources.overseerr.rules[3].action: deny
-      pangolin.proxy-resources.overseerr.rules[3].value: ALL
+      pangolin.proxy-resources.overseerr.rules[1].value: 172.21.0.1
+      pangolin.proxy-resources.overseerr.rules[2].match: country
+      pangolin.proxy-resources.overseerr.rules[2].action: deny
+      pangolin.proxy-resources.overseerr.rules[2].value: ALL


  wizarr:
    container_name: wizarr
-    image: ghcr.io/wizarrrr/wizarr:v2026.4.0
+    image: ghcr.io/wizarrrr/wizarr:v2026.9.1
    network_mode: bridge
    ports:
      - "5690:5690"
@@ -492,18 +464,15 @@ services:
      pangolin.proxy-resources.wizarr.targets[0].healthcheck.port: 5690
      pangolin.proxy-resources.wizarr.targets[0].healthcheck.enabled: true
      pangolin.proxy-resources.wizarr.auth.sso-enabled: false
-      pangolin.proxy-resources.wizarr.rules[0].match: country
+      pangolin.proxy-resources.wizarr.rules[0].match: region
      pangolin.proxy-resources.wizarr.rules[0].action: allow
-      pangolin.proxy-resources.wizarr.rules[0].value: NL
-      pangolin.proxy-resources.wizarr.rules[1].match: country
+      pangolin.proxy-resources.wizarr.rules[0].value: EU
+      pangolin.proxy-resources.wizarr.rules[1].match: ip
      pangolin.proxy-resources.wizarr.rules[1].action: allow
-      pangolin.proxy-resources.wizarr.rules[1].value: DE
-      pangolin.proxy-resources.wizarr.rules[2].match: ip
-      pangolin.proxy-resources.wizarr.rules[2].action: allow
-      pangolin.proxy-resources.wizarr.rules[2].value: 172.21.0.1
-      pangolin.proxy-resources.wizarr.rules[3].match: country
-      pangolin.proxy-resources.wizarr.rules[3].action: deny
-      pangolin.proxy-resources.wizarr.rules[3].value: ALL
+      pangolin.proxy-resources.wizarr.rules[1].value: 172.21.0.1
+      pangolin.proxy-resources.wizarr.rules[2].match: country
+      pangolin.proxy-resources.wizarr.rules[2].action: deny
+      pangolin.proxy-resources.wizarr.rules[2].value: ALL
    environment:
      - PUID=99 #Set UID
      - PGID=100 #Set GID
@@ -512,7 +481,7 @@ services:
    restart: always

  kavita:
-    image: ghcr.io/kareadita/kavita:0.9.0    # Using the stable branch from ghcr.io
+    image: ghcr.io/kareadita/kavita:0.9.1    # Using the stable branch from ghcr.io
    container_name: kavita
    network_mode: bridge
    volumes:
@@ -524,6 +493,154 @@ services:
      - "5008:5000"
    restart: unless-stopped

+  # https://github.com/bookorbit/bookorbit
+  # Requires BOOKORBIT_DB_PASSWORD, BOOKORBIT_JWT_SECRET and BOOKORBIT_SETUP_TOKEN
+  # (see vaults3 for how secrets are supplied). First-time setup token is shown in the web UI.
+  bookorbit:
+    image: ghcr.io/bookorbit/bookorbit:3.2.0
+    container_name: bookorbit-app
+    network_mode: bridge
+    ports:
+      - "3099:3000"
+    environment:
+      TZ: Europe/Berlin
+      NODE_ENV: production
+      PORT: 3000
+      PUID: 99
+      PGID: 100
+      APP_URL: https://bookorbit.arnoutvw.nl
+      POSTGRES_HOST: 192.168.10.144
+      POSTGRES_PORT: 5435
+      POSTGRES_USER: bookorbit
+      POSTGRES_PASSWORD: ${BOOKORBIT_DB_PASSWORD}
+      POSTGRES_DB: bookorbit
+      JWT_SECRET: ${BOOKORBIT_JWT_SECRET}
+      SETUP_BOOTSTRAP_TOKEN: ${BOOKORBIT_SETUP_TOKEN}
+      BOOK_REQUEST_ENCRYPTION_KEY: ${BOOK_REQUEST_ENCRYPTION_KEY}
+    depends_on:
+      bookorbit-db:
+        condition: service_healthy
+    volumes:
+      - /mnt/user/books:/books
+      - /mnt/user/appdata/bookorbit/app:/data
+    read_only: true
+    tmpfs:
+      - /tmp
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
+      - FOWNER
+      - SETGID
+      - SETUID
+    security_opt:
+      - no-new-privileges:true
+    stop_grace_period: 30s
+    restart: unless-stopped
+    labels:
+      traefik.http.routers.bookorbit.rule: "Host(`bookorbit.arnoutvw.nl`)"
+
+  shelfarr:
+    container_name: shelfarr
+    image: ghcr.io/pedro-revez-silva/shelfarr:2026.09.28.1
+    network_mode: bridge
+    ports:
+      - "5056:80"
+    environment:
+      - PUID=99
+      - PGID=100
+      - TZ=Europe/Berlin
+      - HOST_OS=Unraid
+      - HOST_HOSTNAME=Atlas
+      - HOST_CONTAINERNAME=shelfarr
+      - SOLID_QUEUE_IN_PUMA=1
+    volumes:
+      - /mnt/user/appdata/shelfarr:/rails/storage
+      - /mnt/user/books/audiobooks:/audiobooks
+      - /mnt/user/books/ebooks:/ebooks
+      - /mnt/user/books:/books
+      - /mnt/user/downloads:/downloads
+    healthcheck:
+      test: [ "CMD", "curl", "-f", "http://localhost:80/up" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    restart: unless-stopped
+    labels:
+      net.unraid.docker.icon: "https://raw.githubusercontent.com/Pedro-Revez-Silva/shelfarr/main/app/assets/images/logo.png"
+      net.unraid.docker.webui: "http://[IP]:[PORT:5056]/"
+      traefik.http.routers.shelfarr.rule: "Host(`shelfarr.arnoutvw.nl`)"
+      pangolin.proxy-resources.shelfarr.name: shelfarr
+      pangolin.proxy-resources.shelfarr.full-domain: shelfarr.arnoutvw.nl
+      pangolin.proxy-resources.shelfarr.protocol: http
+      pangolin.proxy-resources.shelfarr.ssl: true
+      pangolin.proxy-resources.shelfarr.targets[0].method: http
+      pangolin.proxy-resources.shelfarr.targets[0].hostname: 192.168.10.144
+      pangolin.proxy-resources.shelfarr.targets[0].healthcheck.hostname: 192.168.10.144
+      pangolin.proxy-resources.shelfarr.targets[0].healthcheck.port: 5056
+      pangolin.proxy-resources.shelfarr.targets[0].healthcheck.enabled: true
+      pangolin.proxy-resources.shelfarr.auth.sso-enabled: false
+      pangolin.proxy-resources.shelfarr.rules[0].match: region
+      pangolin.proxy-resources.shelfarr.rules[0].action: allow
+      pangolin.proxy-resources.shelfarr.rules[0].value: EU
+      pangolin.proxy-resources.shelfarr.rules[1].match: ip
+      pangolin.proxy-resources.shelfarr.rules[1].action: allow
+      pangolin.proxy-resources.shelfarr.rules[1].value: 172.21.0.1
+      pangolin.proxy-resources.shelfarr.rules[2].match: country
+      pangolin.proxy-resources.shelfarr.rules[2].action: deny
+      pangolin.proxy-resources.shelfarr.rules[2].value: ALL
+
+  bookorbit-db:
+    image: pgvector/pgvector:pg18
+    container_name: bookorbit-db
+    network_mode: bridge
+    ports:
+      - "5435:5432"
+    environment:
+      TZ: Europe/Berlin
+      POSTGRES_USER: bookorbit
+      POSTGRES_PASSWORD: ${BOOKORBIT_DB_PASSWORD}
+      POSTGRES_DB: bookorbit
+      PGDATA: /var/lib/postgresql/data/pgdata
+    volumes:
+      - /mnt/cache/appdata/bookorbit/db:/var/lib/postgresql/data
+    healthcheck:
+      test: [ "CMD-SHELL", "pg_isready -U bookorbit -d bookorbit" ]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+      start_period: 20s
+    restart: unless-stopped
+
+
+  hydra2:
+    container_name: "hydra2"
+    entrypoint:
+      - "/init"
+    environment:
+      - "PUID=99"
+      - "PGID=100"
+      - "UMASK=000"
+      - "TZ=Europe/Berlin"
+      - "NZBHYDRA2_RELEASE_TYPE=Release"
+    image: "lscr.io/linuxserver/nzbhydra2:v7.16.3-ls62"
+    ipc: "private"
+    logging:
+      driver: "json-file"
+      options:
+        max-file: "1"
+        max-size: "50m"
+    network_mode: "bridge"
+    ports:
+      - "5076:5076/tcp"
+    restart: "unless-stopped"
+    volumes:
+      - "/mnt/cache/appdata/hydra2:/config"
+      - "/mnt/cache/sabnzbd/watched:/data"
+
+
 volumes:
  28eea8bfffd285350962765a88ff04ea9d580fe872771d5c06fd62afb26f2ef2:
    external: true
@@ -25,25 +25,22 @@ services:
      - pangolin.proxy-resources.immich.targets[0].healthcheck.port=8693
      - pangolin.proxy-resources.immich.targets[0].healthcheck.enabled=true
      - pangolin.proxy-resources.immich.auth.sso-enabled=false
-      - pangolin.proxy-resources.immich.rules[0].match=country
+      - pangolin.proxy-resources.immich.rules[0].match=region
      - pangolin.proxy-resources.immich.rules[0].action=allow
-      - pangolin.proxy-resources.immich.rules[0].value=NL
-      - pangolin.proxy-resources.immich.rules[1].match=country
+      - pangolin.proxy-resources.immich.rules[0].value=EU
+      - pangolin.proxy-resources.immich.rules[1].match=ip
      - pangolin.proxy-resources.immich.rules[1].action=allow
-      - pangolin.proxy-resources.immich.rules[1].value=DE
+      - pangolin.proxy-resources.immich.rules[1].value=172.21.0.1
      - pangolin.proxy-resources.immich.rules[2].match=ip
      - pangolin.proxy-resources.immich.rules[2].action=allow
-      - pangolin.proxy-resources.immich.rules[2].value=172.21.0.1
-      - pangolin.proxy-resources.immich.rules[3].match=ip
-      - pangolin.proxy-resources.immich.rules[3].action=allow
-      - pangolin.proxy-resources.immich.rules[3].value=212.227.105.183
-      - pangolin.proxy-resources.immich.rules[4].match=country
-      - pangolin.proxy-resources.immich.rules[4].action=deny
-      - pangolin.proxy-resources.immich.rules[4].value=ALL
+      - pangolin.proxy-resources.immich.rules[2].value=212.227.105.183
+      - pangolin.proxy-resources.immich.rules[3].match=country
+      - pangolin.proxy-resources.immich.rules[3].action=deny
+      - pangolin.proxy-resources.immich.rules[3].value=ALL
      - net.unraid.docker.icon="https://raw.githubusercontent.com/imagegenius/templates/main/unraid/img/immich.png"
      - net.unraid.docker.managed="dockerman"
    container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:v2.7.5
+    image: ghcr.io/immich-app/immich-server:v3.2.4
    extends:
      file: hwaccel.transcoding.yml
      service: vaapi
@@ -72,7 +69,7 @@ services:
    container_name: immich_machine_learning
    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
    # Example tag: ${IMMICH_VERSION:-release}-cuda
-    image: ghcr.io/immich-app/immich-machine-learning:v2.7.5-openvino
+    image: ghcr.io/immich-app/immich-machine-learning:v3.2.4-openvino
    extends: # uncomment this section for hardware acceleration - see https://docs.immich.app/features/ml-hardware-acceleration
      file: hwaccel.ml.yml
      service: openvino # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
@@ -87,7 +84,7 @@ services:

  redis:
    container_name: immich_redis
-    image: docker.io/valkey/valkey:9.1.0-alpine
+    image: docker.io/valkey/valkey:9.1.2-alpine
    network_mode: "bridge"
    ports:
      - '6380:6379'
@@ -166,21 +163,18 @@ services:
      - pangolin.proxy-resources.immich-proxy.targets[0].healthcheck.port=8694
      - pangolin.proxy-resources.immich-proxy.targets[0].healthcheck.enabled=true
      - pangolin.proxy-resources.immich-proxy.auth.sso-enabled=false
-      - pangolin.proxy-resources.immich-proxy.rules[0].match=country
+      - pangolin.proxy-resources.immich-proxy.rules[0].match=region
      - pangolin.proxy-resources.immich-proxy.rules[0].action=allow
-      - pangolin.proxy-resources.immich-proxy.rules[0].value=NL
-      - pangolin.proxy-resources.immich-proxy.rules[1].match=country
+      - pangolin.proxy-resources.immich-proxy.rules[0].value=EU
+      - pangolin.proxy-resources.immich-proxy.rules[1].match=ip
      - pangolin.proxy-resources.immich-proxy.rules[1].action=allow
-      - pangolin.proxy-resources.immich-proxy.rules[1].value=DE
+      - pangolin.proxy-resources.immich-proxy.rules[1].value=172.21.0.1
      - pangolin.proxy-resources.immich-proxy.rules[2].match=ip
      - pangolin.proxy-resources.immich-proxy.rules[2].action=allow
-      - pangolin.proxy-resources.immich-proxy.rules[2].value=172.21.0.1
-      - pangolin.proxy-resources.immich-proxy.rules[3].match=ip
-      - pangolin.proxy-resources.immich-proxy.rules[3].action=allow
-      - pangolin.proxy-resources.immich-proxy.rules[3].value=212.227.105.183
-      - pangolin.proxy-resources.immich-proxy.rules[4].match=country
-      - pangolin.proxy-resources.immich-proxy.rules[4].action=deny
-      - pangolin.proxy-resources.immich-proxy.rules[4].value=ALL
+      - pangolin.proxy-resources.immich-proxy.rules[2].value=212.227.105.183
+      - pangolin.proxy-resources.immich-proxy.rules[3].match=country
+      - pangolin.proxy-resources.immich-proxy.rules[3].action=deny
+      - pangolin.proxy-resources.immich-proxy.rules[3].value=ALL

 volumes:
  model-cache:
@@ -10,7 +10,7 @@ services:
    ports:
      - "9633:9633"
  cadvisor:
-    image: gcr.io/cadvisor/cadvisor:latest
+    image: gcr.io/cadvisor/cadvisor:v0.55.1
    container_name: cadvisor
    pull_policy: always
    restart: unless-stopped
@@ -35,7 +35,7 @@ services:
      - "HOST_OS=Unraid"
      - "HOST_HOSTNAME=Atlas"
      - "HOST_CONTAINERNAME=prometheus"
-    image: "prom/prometheus:v3.12.0"
+    image: "prom/prometheus:v3.15.0"
    labels:
      maintainer: "The Prometheus Authors <prometheus-developers@googlegroups.com>"
      net.unraid.docker.icon: "https://raw.githubusercontent.com/selfhosters/unRAID-CA-templates/master/templates/img/prometheus.png"
@@ -1,151 +0,0 @@
-version: "3.6"
-
-services:
-
-  Pocket-ID:
-
-    command:
-      - "/app/pocket-id"
-
-    container_name: "Pocket-ID"
-
-    entrypoint:
-      - "/app/docker/entrypoint.sh"
-
-    environment:
-      - "UPLOAD_PATH=data/uploads"
-      - "PORT=3876"
-      - "MAXMIND_LICENSE_KEY=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"
-      - "METRICS_ENABLED=true"
-      - "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT=http://192.168.10.144:9411/"
-      - "BACKEND_PORT=8080"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=Pocket-ID"
-      - "ENCRYPTION_KEY=ErBEvH-VGNqxyjSF3yJL0H$$e&i$$rYlJ"
-      - "DB_CONNECTION_STRING=data/pocket-id.db"
-      - "TZ=Europe/Berlin"
-      - "TRUST_PROXY=true"
-      - "OTEL_EXPORTER_PROMETHEUS_HOST=0.0.0.0"
-      - "OTEL_EXPORTER_OTLP_LOGS_ENDPOINT=http://192.168.10.144:3101/otlp"
-      - "DB_PATH=data/pocket-id.db"
-      - "PUID=099"
-      - "PGID=100"
-      - "HOST_OS=Unraid"
-      - "APP_URL=https://pass.arnoutvw.nl"
-      - "TRACING_ENABLED=false"
-      - "OTEL_METRICS_EXPORTER=prometheus"
-      - "OTEL_EXPORTER_ZIPKIN_ENDPOINT=http://192.168.10.144:9411/api/v2/spans"
-      - "OTEL_SERVICE_NAME=pocketid"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "APP_ENV=production"
-
-    hostname: "cebc7087e1f1"
-
-    image: "ghcr.io/pocket-id/pocket-id:latest"
-
-    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/nwithan8/unraid_templates/master/images/pocket-id-icon.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:80]/"
-      org.opencontainers.image.authors: "Pocket ID"
-      org.opencontainers.image.created: "2026-05-11T16:13:02.381Z"
-      org.opencontainers.image.description: "A simple and easy-to-use OIDC provider that allows users        \ to authenticate with their passkeys to your services."
-      org.opencontainers.image.documentation: "https://github.com/pocket-id/pocket-id/blob/main/README.md"
-      org.opencontainers.image.licenses: "BSD-2-Clause"
-      org.opencontainers.image.ref.name: "pocket-id"
-      org.opencontainers.image.revision: "9399cba775e5c3eb6b70742092e232b148fd9a0f"
-      org.opencontainers.image.source: "https://github.com/pocket-id/pocket-id"
-      org.opencontainers.image.title: "Pocket ID"
-      org.opencontainers.image.url: "https://github.com/pocket-id/pocket-id"
-      org.opencontainers.image.version: "next"
-      traefik.http.routers.pocketid.rule: "Host(`pass.arnoutvw.nl`)"
-      traefik.http.services.pocketid.loadbalancer.server.port: "3876"
-
-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
-
-    mac_address: "06:0d:9c:6e:78:92"
-
-    network_mode: "bridge"
-
-    ports:
-      - "3876:3876/tcp"
-      - "9464:9464/tcp"
-
-    restart: "unless-stopped"
-
-    volumes:
-      - "/mnt/cache/appdata/pocket-id/data:/app/data"
-      - "/mnt/user/appdata/pocket-id/data:/app/backend/data"
-
-    working_dir: "/app"
-
-  traefik:
-
-    command:
-      - "traefik"
-
-    container_name: "traefik"
-
-    entrypoint:
-      - "/entrypoint.sh"
-
-    environment:
-      - "HOST_CONTAINERNAME=traefik"
-      - "CF_DNS_API_TOKEN=yt9Q41S9jg92mxpZaWyd6MyOP6Y7OeC5GdUl1tRD"
-      - "CF_API_EMAIL=4v792wk2b2@privaterelay.appleid.com"
-      - "CA_TS_FALLBACK_DIR=/etc/traefik"
-      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-
-    hostname: "e105f8d7bd37"
-
-    image: "traefik:latest"
-
-    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/ibracorp/unraid-templates/master/icons/traefik.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:8080]/"
-      org.opencontainers.image.description: "A modern reverse-proxy"
-      org.opencontainers.image.documentation: "https://docs.traefik.io"
-      org.opencontainers.image.source: "https://github.com/traefik/traefik"
-      org.opencontainers.image.title: "Traefik"
-      org.opencontainers.image.url: "https://traefik.io"
-      org.opencontainers.image.vendor: "Traefik Labs"
-      org.opencontainers.image.version: "v3.7.0"
-      traefik.enable: "true"
-      traefik.http.routers.api.entryPoints: "https"
-      traefik.http.routers.api.rule: "Host(`traefik.arnoutvw.nl`)"
-      traefik.http.routers.api.service: "api@internal"
-
-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
-
-    mac_address: "4a:0d:96:16:44:47"
-
-    network_mode: "bridge"
-
-    ports:
-      - "443:443/tcp"
-      - "80:80/tcp"
-      - "8183:8080/tcp"
-
-    restart: "always"
-
-    volumes:
-      - "/mnt/user/appdata/traefik:/etc/traefik"
-      - "/var/run/docker.sock:/var/run/docker.sock"
-
-    working_dir: "/"
@@ -1,207 +1,60 @@
 version: "3.6"
 services:
  Stash:
-
    command:
      - "stash"
-
    container_name: "Stash"
-
    environment:
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=Stash"
      - "STASH_CACHE=/cache/"
      - "STASH_METADATA=/metadata/"
      - "STASH_GENERATED=/generated/"
      - "STASH_STASH=/data/"
-      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
      - "STASH_CONFIG_FILE=/root/.stash/config.yml"
-
-    hostname: "7b50f7a41294"
-
-    image: "stashapp/stash"
-
+      - "TZ=Europe/Berlin"
+    image: "stashapp/stash:v0.31.1"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/CorneliousJD/Docker-Templates/master/icons/stash.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:9999]"
-      org.opencontainers.image.description: "An organizer for your porn, written in Go."
-      org.opencontainers.image.documentation: "https://docs.stashapp.cc"
-      org.opencontainers.image.licenses: "AGPL-3.0"
-      org.opencontainers.image.source: "https://github.com/stashapp/stash"
-      org.opencontainers.image.title: "Stash"
-      org.opencontainers.image.url: "https://stashapp.cc"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "da:1f:55:c6:af:98"
-
    network_mode: "bridge"
-
    ports:
      - "6969:9999/tcp"
-
+    restart: "unless-stopped"
    volumes:
      - "/mnt/user/P:/data"
      - "/mnt/user/appdata/stash/cache:/cache"
      - "/mnt/user/appdata/stash/config:/root/.stash"
      - "/mnt/user/appdata/stash/generated:/generated"
      - "/mnt/user/appdata/stash/metadata:/metadata"
-
    working_dir: "/"


  teslacamplayer:
-
    container_name: "teslacamplayer"
-
    entrypoint:
      - "/init"
-
    environment:
-      - "HOST_CONTAINERNAME=teslacamplayer"
      - "PUID=99"
      - "PGID=100"
      - "UMASK=022"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "PATH=/lsiopy/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "PS1=$$(whoami)@$$(hostname):$$(pwd)\\$$ "
-      - "HOME=/root"
-      - "TERM=xterm"
-      - "S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0"
-      - "S6_VERBOSITY=1"
-      - "S6_STAGE2_HOOK=/docker-mods"
-      - "VIRTUAL_ENV=/lsiopy"
      - "ClipsRootPath=/media"
      - "CacheFilePath=/config/clips.json"
      - "ASPNETCORE_URLS=http://+:5000"
-
-    hostname: "f45cbf139eb8"
-
-    image: "ghcr.io/imagegenius/teslacamplayer"
-
+    image: "ghcr.io/imagegenius/teslacamplayer:2024.8.11.923-ig37"
    ipc: "private"
-
-    labels:
-      build_version: "ImageGenius Version:- 2024.8.11.923-ig37 Build-date:- 2025-08-20T20:52:27+10:00"
-      maintainer: "hydazz"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/imagegenius/templates/main/unraid/img/default.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:5000]"
-      org.opencontainers.image.authors: "imagegenius.io"
-      org.opencontainers.image.created: "2025-08-20T20:52:27+10:00"
-      org.opencontainers.image.description: "A Blazor WASM application for easily viewing locally stored\
-        \ Tesla sentry & dashcam videos."
-      org.opencontainers.image.documentation: "https://docs.linuxserver.io/images/docker-baseimage-alpine"
-      org.opencontainers.image.licenses: "GPL-3.0-only"
-      org.opencontainers.image.ref.name: "4a9c87b7ff08d6949816a56eb652fda7877e59fe"
-      org.opencontainers.image.revision: "4a9c87b7ff08d6949816a56eb652fda7877e59fe"
-      org.opencontainers.image.source: "https://github.com/imagegenius/docker-teslacamplayer"
-      org.opencontainers.image.title: "Teslacamplayer"
-      org.opencontainers.image.url: "https://github.com/imagegenius/docker-teslacamplayer/packages"
-      org.opencontainers.image.vendor: "imagegenius.io"
-      org.opencontainers.image.version: "2024.8.11.923-ig37"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "2e:5f:f5:a5:41:c9"
-
    network_mode: "bridge"
-
    ports:
      - "5011:5000/tcp"
-
+    restart: "unless-stopped"
    volumes:
      - "/mnt/cache/appdata/teslacamplayer:/config"
      - "/mnt/user/tesla:/media"
-
-    working_dir: "/"
-
-
-  youtube-dl-material:
-
-    command:
-      - "npm"
-      - "start"
-
-    container_name: "youtube-dl-material"
-
-    entrypoint:
-      - "/app/entrypoint.sh"
-
-    environment:
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=youtube-dl-material"
-      - "GID=100"
-      - "ytdl_allow_advanced_download=true"
-      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "ytdl_title_top=YoutubeDL Material"
-      - "UID=99"
-      - "CA_TS_FALLBACK_DIR=/app/appdata"
-      - "PATH=/usr/local/nvm/versions/node/v16.14.2/bin/:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "USER=youtube"
-      - "NO_UPDATE_NOTIFIER=true"
-      - "PM2_HOME=/app/pm2"
-      - "ALLOW_CONFIG_MUTATIONS=true"
-      - "npm_config_cache=/app/.npm"
-      - "NODE_VERSION=16.14.2"
-      - "NVM_DIR=/usr/local/nvm"
-
-    hostname: "ddc677770d8f"
-
-    image: "tzahi12345/youtubedl-material:nightly"
-
-    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/selfhosters/unRAID-CA-templates/master/templates/img/youtubedl-material.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:17442]/"
-      org.opencontainers.image.created: "2025-03-18T04:46:57.287Z"
-      org.opencontainers.image.description: "Self-hosted YouTube downloader built on Material Design"
-      org.opencontainers.image.licenses: "MIT"
-      org.opencontainers.image.ref.name: "ubuntu"
-      org.opencontainers.image.revision: "100e6f81746c7e0a1219762a61fff30bd7c4d23b"
-      org.opencontainers.image.source: "https://github.com/Tzahi12345/YoutubeDL-Material"
-      org.opencontainers.image.title: "YoutubeDL-Material"
-      org.opencontainers.image.url: "https://github.com/Tzahi12345/YoutubeDL-Material"
-      org.opencontainers.image.version: "nightly-2025-03-18"
-
-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
-
-    network_mode: "bridge"
-
-    ports:
-      - "17442:17442/tcp"
-
-    volumes:
-      - "/mnt/user/Plex/audio:/app/audio"
-      - "/mnt/user/Plex/subs:/app/subscriptions"
-      - "/mnt/user/Plex/video:/app/video"
-      - "/mnt/user/appdata/youtubedl-material:/app/appdata"
-
-    working_dir: "/app"
-
-version: "3.6"
-
-volumes:
-
+    working_dir: "/"
@@ -1,70 +1,40 @@
 version: "3.6"
 services:
  UniFi-Poller:
-
    container_name: "UniFi-Poller"
-
    entrypoint:
      - "/usr/bin/unpoller"
-
    environment:
      - "UP_INFLUXDB_DISABLE=false"
-      - "HOST_HOSTNAME=Atlas"
      - "UP_POLLER_DEBUG=false"
      - "UP_INFLUXDB_URL=http://192.168.10.144:8785"
      - "UP_UNIFI_CONTROLLER_0_SAVE_IDS=true"
      - "UP_UNIFI_CONTROLLER_0_VERIFY_SSL=false"
-      - "UP_INFLUXDB_PASS=unifipoller"
+      - "UP_INFLUXDB_PASS=${INFLUXDB_UNIFI_PASSWORD}"
      - "UP_PROMETHEUS_HTTP_LISTEN=0.0.0.0:9031"
      - "UP_PROMETHEUS_DISABLE=true"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
      - "UP_UNIFI_CONTROLLER_0_URL=https://192.168.10.1"
-      - "UP_UNIFI_CONTROLLER_0_PASS=meef*RHOT3hurm1wiwn"
+      - "UP_UNIFI_CONTROLLER_0_PASS=${UNIFI_POLLER_PASSWORD}"
      - "UP_UNIFI_CONTROLLER_0_SAVE_DPI=true"
      - "UP_INFLUXDB_DB=unifi"
      - "UP_POLLER_QUIET=false"
      - "UP_UNIFI_CONTROLLER_0_SITES_0=all"
-      - "HOST_CONTAINERNAME=UniFi-Poller"
      - "UP_UNIFI_CONTROLLER_0_USER=unifipoller"
      - "UP_UNIFI_CONTROLLER_0_SAVE_SITES=true"
      - "UP_INFLUXDB_USER=unifipoller"
      - "UP_INFLUXDB_INTERVAL=30s"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
      - "SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt"
-
-    hostname: "73a07c5c74d4"
-
-    image: "golift/unifi-poller"
-
+    image: "golift/unifi-poller:v5.5.0"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/wiki/unifi-poller/unifi-poller/images/unifi-poller-logo.png"
-      net.unraid.docker.managed: "dockerman"
-      org.opencontainers.image.created: "2026-05-09T16:57:52Z"
-      org.opencontainers.image.description: "Telemetry and Observability for your UniFi Network"
-      org.opencontainers.image.documentation: "https://unpoller.com/docs/install/docker"
-      org.opencontainers.image.licenses: "MIT"
-      org.opencontainers.image.revision: "0b83c6ad192f01d582e4f6b720c4d0ed223348cd"
-      org.opencontainers.image.source: "https://github.com/unpoller/unpoller"
-      org.opencontainers.image.title: "unpoller"
-      org.opencontainers.image.url: "https://unpoller.com"
-      org.opencontainers.image.vendor: "unpoller"
-      org.opencontainers.image.version: "3.1.2"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "7a:c5:bb:88:32:90"
-
    network_mode: "bridge"
-
    user: "0"
-
+    restart: "unless-stopped"
    working_dir: "/"


@@ -73,138 +43,59 @@ services:
    entrypoint:
      - "/adguard-exporter"
    environment:
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=adguard-exporter"
      - "ADGUARD_SERVERS=http://192.168.10.54:3000,http://192.168.10.65:8083"
      - "ADGUARD_USERNAMES=arnout,admin"
-      - "ADGUARD_PASSWORDS=cZoogaN7Kk3A9N_uF.AasCsL,Xo48Yak8"
+      - "ADGUARD_PASSWORDS=${ADGUARD_PASSWORDS}"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-    hostname: "ed0be1873597"
-    image: "ghcr.io/henrywhitaker3/adguard-exporter:latest"
+    image: "ghcr.io/henrywhitaker3/adguard-exporter:v1.2.1"
    ipc: "private"
-    labels:
-      net.unraid.docker.managed: "dockerman"
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-    mac_address: "76:ab:8c:a7:96:36"
    network_mode: "bridge"
    ports:
      - "9618:9618/tcp"
    user: "65532:65532"
+    restart: "unless-stopped"
    working_dir: "/"


  glances:
-
    command:
      - "/bin/sh"
      - "-c"
-      - "/venv/bin/python${PYTHON_VERSION} -m glances ${GLANCES_OPT}"
-
+      # $$ zodat compose niet interpoleert; shell doet dit runtime
+      - "/venv/bin/python$${PYTHON_VERSION} -m glances $${GLANCES_OPT}"
    container_name: "glances"
-
    environment:
      - "GLANCES_OPT=-w -C /config/glances.conf"
+      - "TERM=xterm"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=glances"
-      - "PATH=/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "PYTHON_VERSION=3.12"
-
+      - "PYTHON_VERSION=3.14"
    expose:
      - "61208/tcp"
      - "61209/tcp"
-
    hostname: "Atlas"
-
-    image: "nicolargo/glances"
-
+    image: "nicolargo/glances:4.5.7"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://github.com/nicolargo/glances/raw/master/glances/outputs/static/images/glances.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:61208]/"
-      org.opencontainers.image.created: "2026-04-19T07:46:19.019Z"
-      org.opencontainers.image.description: "Glances an Eye on your system. A top/htop alternative for\
-        \ GNU/Linux, BSD, Mac OS and Windows operating systems."
-      org.opencontainers.image.licenses: "NOASSERTION"
-      org.opencontainers.image.revision: "05ff62d883d690809509517dec62684e6c4590d4"
-      org.opencontainers.image.source: "https://github.com/nicolargo/glances"
-      org.opencontainers.image.title: "glances"
-      org.opencontainers.image.url: "https://nicolargo.github.io/glances/"
-      org.opencontainers.image.version: "v4.5.4"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
    network_mode: "host"
-
    restart: "always"
-
    security_opt:
      - "label=disable"
-
    volumes:
      - "/mnt/cache/appdata/glances:/config"
      - "/mnt:/mnt:ro"
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
-
    working_dir: "/app"


-  node_exporter:
-    command:
-      - "--path.rootfs=/host"
-      - "--path.procfs=/host/proc"
-      - "--path.sysfs=/host/sys"
-    container_name: "node_exporter"
-    entrypoint:
-      - "/bin/node_exporter"
-    environment:
-      - "TZ=Europe/Amsterdam"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-    expose:
-      - "9100/tcp"
-    hostname: "Atlas"
-    image: "quay.io/prometheus/node-exporter:v1.10.2"
-    ipc: "private"
-    labels:
-      com.docker.compose.config-hash: "d639e89e8c04a853ef5656529d9a2f25bac18fb2122dc541f611de282dd81f8a"
-      com.docker.compose.container-number: "1"
-      com.docker.compose.depends_on: ""
-      com.docker.compose.image: "sha256:2715d223fd463573419598cc8811def0fdd913fe6f95e9447ab66ef57a1d3661"
-      com.docker.compose.oneoff: "False"
-      com.docker.compose.project: "infra"
-      com.docker.compose.project.config_files: "/etc/komodo/repos/compose-files/infra/compose.yaml"
-      com.docker.compose.project.working_dir: "/etc/komodo/repos/compose-files/infra"
-      com.docker.compose.service: "node_exporter"
-      com.docker.compose.version: "2.39.4"
-      maintainer: "The Prometheus Authors <prometheus-developers@googlegroups.com>"
-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
-    network_mode: "host"
-    restart: "unless-stopped"
-    security_opt:
-      - "no-new-privileges:true"
-      - "label=disable"
-    user: "nobody"
-    volumes:
-      - "/:/host:ro"
-
-
  postgres_exporter:
    command:
      - "--config.file=/app/postgres_exporter.yml"
@@ -212,85 +103,53 @@ services:
    entrypoint:
      - "/bin/postgres_exporter"
    environment:
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=postgres_exporter"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-    hostname: "144da414c92d"
-    image: "quay.io/prometheuscommunity/postgres-exporter"
+    image: "quay.io/prometheuscommunity/postgres-exporter:v0.20.1"
    ipc: "private"
-    labels:
-      maintainer: "The Prometheus Authors <prometheus-developers@googlegroups.com>"
-      net.unraid.docker.managed: "dockerman"
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-    mac_address: "c6:51:f3:4f:a9:b0"
    network_mode: "bridge"
    ports:
      - "9187:9187/tcp"
+    restart: "unless-stopped"
    user: "nobody"
    volumes:
      - "/mnt/cache/appdata/postgres_exporter:/app"


  telegraf:
-
    command:
      - "telegraf"
-
    container_name: "telegraf"
-
    entrypoint:
      - "/entrypoint.sh"
-
    environment:
      - "HOST_SYS=/rootfs/sys"
      - "HOST_ETC=/rootfs/etc"
      - "HOST_MOUNT_PREFIX=/rootfs"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=telegraf"
      - "HOST_PROC=/rootfs/proc"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "TELEGRAF_VERSION=1.38.3"
-
    expose:
      - "8092/udp"
      - "8094/tcp"
      - "8125/udp"
-
    hostname: "Atlas"
-
-    image: "golift/telegraf"
-
+    image: "golift/telegraf@sha256:80bedf58b930d4f7bcb7a9bf571c8e085e768771869e27112e9117d510a80cd2"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://github.com/atribe/unRAID-docker/raw/master/icons/telegraf.png"
-      net.unraid.docker.managed: "dockerman"
-      org.opencontainers.image.source: "https://github.com/influxdata/telegraf"
-      org.opencontainers.image.url: "https://github.com/golift/telegraf-docker"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
    network_mode: "host"
-
    privileged: true
-
+    restart: "unless-stopped"
    security_opt:
      - "label=disable"
-
    user: "telegraf:281"
-
    volumes:
      - "/:/rootfs:ro"
      - "/etc:/rootfs/etc:ro"
@@ -302,3 +161,23 @@ services:
      - "/var/run/utmp:/var/run/utmp:ro"


+  Grafana:
+    container_name: "Grafana"
+    environment:
+      - "TZ=Europe/Berlin"
+      - "GF_SERVER_ROOT_URL=http://grafana.arnoutvw.nl"
+      - "GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD}"
+    image: "grafana/grafana:13.2.3"
+    ipc: "private"
+    logging:
+      driver: "json-file"
+      options:
+        max-file: "1"
+        max-size: "50m"
+    network_mode: "bridge"
+    ports:
+      - "3029:3000/tcp"
+    restart: "unless-stopped"
+    user: "472"
+    volumes:
+      - "/mnt/user/appdata/grafana-latest:/var/lib/grafana"
@@ -0,0 +1,30 @@
+services:
+  n8n:
+    container_name: "n8n"
+    entrypoint:
+      - "tini"
+      - "--"
+      - "/docker-entrypoint.sh"
+    environment:
+      - "TZ=Europe/Berlin"
+      - "GENERIC_TIMEZONE=Europe/Amsterdam"
+      - "WEBHOOK_URL=https://n8n.arnoutvw.nl"
+      - "N8N_SECURE_COOKIE=false"
+      - "N8N_RELEASE_TYPE=stable"
+      - "NODE_ENV=production"
+      - "NPM_CONFIG_UPDATE_NOTIFIER=false"
+    image: "n8nio/n8n:2.41.6"
+    ipc: "private"
+    logging:
+      driver: "json-file"
+      options:
+        max-file: "1"
+        max-size: "50m"
+    network_mode: "bridge"
+    ports:
+      - "5678:5678/tcp"
+    restart: "unless-stopped"
+    user: "node"
+    volumes:
+      - "/mnt/cache/appdata/n8n:/home/node/.n8n"
+    working_dir: "/home/node"
@@ -32,7 +32,7 @@ services:

    hostname: "92c43ce6f18f"

-    image: "lscr.io/linuxserver/adguardhome-sync"
+    image: "lscr.io/linuxserver/adguardhome-sync:v0.9.0-ls163"

    ipc: "private"

@@ -96,7 +96,7 @@ services:

    hostname: "d0ebe1c068db"

-    image: "cloudflare/cloudflared:latest"
+    image: "cloudflare/cloudflared:2026.9.3"

    ipc: "private"

@@ -155,11 +155,11 @@ services:
      - "HOST_HOSTNAME=Atlas"
      - "HOST_CONTAINERNAME=netbootxyz"
      - "MENU_VERSION=2.0.84"
-      - "PGID=100"
+      - "PGID=1000"
      - "HOST_OS=Unraid"
      - "PORT_RANGE=30000:30010"
      - "SUBFOLDER=/"
-      - "PUID=99"
+      - "PUID=1000"
      - "UMASK=022"
      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
      - "TFTPD_OPTS="
@@ -170,7 +170,7 @@ services:

    hostname: "f513587534eb"

-    image: "ghcr.io/netbootxyz/netbootxyz"
+    image: "ghcr.io/netbootxyz/netbootxyz:0.7.6-nbxyz18"

    ipc: "private"

@@ -215,6 +215,29 @@ services:
    working_dir: "/"


+  cloudflare-ddns:
+    # Keeps thuis.arnoutvw.nl (A, DNS-only) pointed at the home IP.
+    # pangolin.arnoutvw.nl syncs that record into its CrowdSec allowlist "home_ddns".
+    # CLOUDFLARE_DDNS_API_TOKEN: Cloudflare API token with Zone.DNS:Edit on arnoutvw.nl only.
+    image: favonia/cloudflare-ddns:1
+    container_name: cloudflare-ddns
+    restart: unless-stopped
+    network_mode: bridge
+    user: "1000:1000"
+    read_only: true
+    cap_drop:
+      - all
+    security_opt:
+      - no-new-privileges:true
+    environment:
+      - TZ=Europe/Amsterdam
+      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_DDNS_API_TOKEN}
+      - DOMAINS=thuis.arnoutvw.nl
+      - PROXIED=false
+      - TTL=60
+      - IP6_PROVIDER=none
+      - UPDATE_CRON=@every 5m
+

 networks:
  br0:
@@ -0,0 +1,29 @@
+#!/bin/bash
+# Sync CrowdSec allowlist "home_ddns" with the current A record of thuis.arnoutvw.nl.
+# Install: /usr/local/bin/crowdsec-home-allowlist.sh (chmod 755) on pangolin.arnoutvw.nl
+# Cron:    echo "*/5 * * * * root /usr/local/bin/crowdsec-home-allowlist.sh" > /etc/cron.d/crowdsec-home-allowlist
+set -euo pipefail
+HOST=thuis.arnoutvw.nl
+LIST=home_ddns
+CS="docker exec crowdsec cscli"
+
+want=$(dig +short A "$HOST" @1.1.1.1 | grep -E '^[0-9.]+$' | sort -u || true)
+if [ -z "$want" ]; then
+  logger -t crowdsec-home-allowlist "no A record for $HOST, keeping current allowlist"
+  exit 0
+fi
+have=$($CS allowlists inspect "$LIST" -o json \
+  | python3 -c 'import sys,json; [print(i["value"]) for i in (json.load(sys.stdin).get("items") or [])]' | sort -u)
+
+for ip in $want; do
+  if ! grep -qxF "$ip" <<<"$have"; then
+    $CS allowlists add "$LIST" "$ip" -d "$HOST" >/dev/null
+    logger -t crowdsec-home-allowlist "added $ip"
+  fi
+done
+for ip in $have; do
+  if ! grep -qxF "$ip" <<<"$want"; then
+    $CS allowlists remove "$LIST" "$ip" >/dev/null
+    logger -t crowdsec-home-allowlist "removed $ip"
+  fi
+done
@@ -19,7 +19,7 @@ services:
      - "CHANGE_CONFIG_DIR_OWNERSHIP=true"
      - "HOME=/config"
    hostname: "249fece2f30f"
-    image: "plexinc/pms-docker:1.43.1.10611-1e34174b1"
+    image: "plexinc/pms-docker:1.43.4.10903-e5521bd8c"
    labels:
      net.unraid.docker.icon: "https://raw.githubusercontent.com/plexinc/pms-docker/master/img/plex-server.png"
      net.unraid.docker.webui: "http://[IP]:[PORT:32400]/web"
@@ -64,7 +64,7 @@ services:
      - "VIRTUAL_ENV=/lsiopy"
      - "LSIO_FIRST_PARTY=true"
      - "TAUTULLI_DOCKER=True"
-    image: "linuxserver/tautulli:2.17.2"
+    image: "linuxserver/tautulli:2.18.2"
    labels:
      build_version: "Linuxserver.io version:- v2.15.3-ls198 Build-date:- 2025-08-03T17:41:27+00:00"
      maintainer: "nemchik,thelamer"
@@ -123,7 +123,7 @@ services:
      - "VIRTUAL_ENV=/lsiopy"
      - "LSIO_FIRST_PARTY=true"
      - "PYTHONIOENCODING=utf-8"
-    image: "lscr.io/linuxserver/kometa:v2.3.1-ls93"
+    image: "ghcr.io/linuxserver/kometa:2.5.1"
    labels:
      build_version: "Linuxserver.io version:- v2.2.0-ls61 Build-date:- 2025-07-23T05:43:54+00:00"
      maintainer: "thespad"
@@ -162,7 +162,7 @@ services:
      - "VERSION_TAG=stable"
      - "BASE_PATH="

-    image: "ghcr.io/jorenn92/maintainerr:2.19"
+    image: "ghcr.io/maintainerr/maintainerr:3.30.0"

    labels:
      Description: "Contains the Maintainerr Docker image"
@@ -236,7 +236,7 @@ services:
  #      - "/mnt/user/appdata/maintainerr_overlay_helperr/images:/images"

  prom-plex-exporter:
-    image: ghcr.io/timothystewart6/prometheus-plex-exporter:latest
+    image: ghcr.io/timothystewart6/prometheus-plex-exporter@sha256:90dc0799601c334f2945a3d5b4b552a06352b208a8ce88a428cf90d6c9aa51cd
    ports:
      - "9403:9000/tcp"
    network_mode: "bridge"
@@ -245,4 +245,55 @@ services:
      PLEX_SERVER: http://192.168.10.144:32400
      PLEX_TOKEN: ywjYz8fAh_c4b4DPsy3K

+  dashboarr-backend:
+    image: ghcr.io/renzobeux/dashboarr-backend:1.8.0
+    container_name: dashboarr-backend
+    restart: unless-stopped
+    network_mode: "bridge"
+    ports:
+      - "4231:4000"
+    volumes:
+      - /mnt/user/appdata/dashboarr:/data
+    labels:
+      traefik.http.routers.dashboarr.rule: "Host(`dashboarr.arnoutvw.nl`)"
+      pangolin.proxy-resources.dashboarr.name: dashboarr
+      pangolin.proxy-resources.dashboarr.full-domain: dashboarr.arnoutvw.nl
+      pangolin.proxy-resources.dashboarr.protocol: http
+      pangolin.proxy-resources.dashboarr.ssl: true
+      pangolin.proxy-resources.dashboarr.targets[0].method: http
+      pangolin.proxy-resources.dashboarr.targets[0].hostname: 192.168.10.144
+      pangolin.proxy-resources.dashboarr.targets[0].healthcheck.hostname: 192.168.10.144
+      pangolin.proxy-resources.dashboarr.targets[0].healthcheck.port: 4231
+      pangolin.proxy-resources.dashboarr.targets[0].healthcheck.enabled: true
+      pangolin.proxy-resources.dashboarr.auth.sso-enabled: false
+      pangolin.proxy-resources.dashboarr.rules[0].match: region
+      pangolin.proxy-resources.dashboarr.rules[0].action: allow
+      pangolin.proxy-resources.dashboarr.rules[0].value: EU
+      pangolin.proxy-resources.dashboarr.rules[1].match: ip
+      pangolin.proxy-resources.dashboarr.rules[1].action: allow
+      pangolin.proxy-resources.dashboarr.rules[1].value: 172.21.0.1
+      pangolin.proxy-resources.dashboarr.rules[2].match: country
+      pangolin.proxy-resources.dashboarr.rules[2].action: deny
+      pangolin.proxy-resources.dashboarr.rules[2].value: ALL
+    environment:
+      - NODE_ENV=production
+      - LOG_LEVEL=info
+      # Public URL your phone will use to reach the backend.
+      # When set the pairing QR encodes both the URL and token so the app
+      # can pair in a single scan. When omitted the QR only contains the
+      # token and you enter the URL manually in the app.
+      - PUBLIC_URL=https://dashboarr.arnoutvw.nl
+      # Enable if behind a reverse proxy (Caddy, Nginx, Traefik) so
+      # rate limiting uses the real client IP from X-Forwarded-For.
+      - TRUST_PROXY=true
+      # Poll Expo for push delivery receipts (rarely needed).
+      # - PUSH_RECEIPTS=true
+      # Consecutive failed health checks (30s each) before "service offline"
+      # notification. Default 3 (~1.5 min). Set to 10 for ~5 min tolerance.
+      # - OFFLINE_THRESHOLD=10
+      # Route service polls via remoteUrl instead of localUrl. The app's own
+      # useRemote flag is always ignored server-side. Default false (backend
+      # on LAN). Flip to true only if the backend lives off-LAN.
+      # - BACKEND_USE_REMOTE=false
+

@@ -0,0 +1,47 @@
+services:
+  Pocket-ID:
+    container_name: "Pocket-ID"
+    command:
+      - "/app/pocket-id"
+    entrypoint:
+      - "/app/docker/entrypoint.sh"
+    environment:
+      - "UPLOAD_PATH=data/uploads"
+      - "PORT=3876"
+      - "BACKEND_PORT=8080"
+      - "MAXMIND_LICENSE_KEY=${POCKETID_MAXMIND_LICENSE_KEY}"
+      - "METRICS_ENABLED=true"
+      - "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT=http://192.168.10.144:9411/"
+      - "OTEL_EXPORTER_OTLP_LOGS_ENDPOINT=http://192.168.10.144:3101/otlp"
+      - "OTEL_EXPORTER_ZIPKIN_ENDPOINT=http://192.168.10.144:9411/api/v2/spans"
+      - "OTEL_METRICS_EXPORTER=prometheus"
+      - "OTEL_EXPORTER_PROMETHEUS_HOST=0.0.0.0"
+      - "OTEL_SERVICE_NAME=pocketid"
+      - "TRACING_ENABLED=false"
+      # Inline (niet via Komodo env): waarde bevat "$" die .env-interpolatie
+      # opvreet. Staat wél in git-historie (master.yaml); roteren op termijn.
+      - "ENCRYPTION_KEY=ErBEvH-VGNqxyjSF3yJL0H$$e&i$$rYlJ"
+      - "DB_CONNECTION_STRING=data/pocket-id.db"
+      - "DB_PATH=data/pocket-id.db"
+      - "TZ=Europe/Berlin"
+      - "TRUST_PROXY=true"
+      - "APP_URL=https://pass.arnoutvw.nl"
+      - "APP_ENV=production"
+    image: "ghcr.io/pocket-id/pocket-id:v2.17.0"
+    ipc: "private"
+    labels:
+      traefik.http.routers.pocketid.rule: "Host(`pass.arnoutvw.nl`)"
+      traefik.http.services.pocketid.loadbalancer.server.port: "3876"
+    logging:
+      driver: "json-file"
+      options:
+        max-file: "1"
+        max-size: "50m"
+    network_mode: "bridge"
+    ports:
+      - "3876:3876/tcp"
+      - "9464:9464/tcp"
+    restart: "unless-stopped"
+    volumes:
+      - "/mnt/cache/appdata/pocket-id/data:/app/data"
+      - "/mnt/user/appdata/pocket-id/data:/app/backend/data"
@@ -1,6 +1,6 @@
 services:
  postiz:
-    image: ghcr.io/gitroomhq/postiz-app:v2.21.10
+    image: ghcr.io/gitroomhq/postiz-app:v2.24.0
    container_name: postiz
    restart: always
    network_mode: bridge
@@ -1,64 +0,0 @@
-version: "3.6"
-services:
-  ApacheGuacamole:
-
-    command:
-      - "/etc/firstrun/firstrun.sh"
-
-    container_name: "ApacheGuacamole"
-
-    environment:
-      - "OPT_TOTP=N"
-      - "OPT_HEADER=N"
-      - "PUID=99"
-      - "OPT_DUO=N"
-      - "OPT_SAML=N"
-      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "OPT_SQLSERVER=N"
-      - "OPT_CAS=N"
-      - "OPT_QUICKCONNECT=N"
-      - "HOST_CONTAINERNAME=ApacheGuacamole"
-      - "OPT_MYSQL=Y"
-      - "OPT_MYSQL_EXTENSION=N"
-      - "OPT_OPENID=N"
-      - "OPT_LDAP=N"
-      - "PGID=100"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "HOME=/config"
-      - "LC_ALL=C.UTF-8"
-      - "LANG=en_US.UTF-8"
-      - "LANGUAGE=en_US.UTF-8"
-      - "LD_LIBRARY_PATH=/opt/guacamole/lib"
-      - "GUACD_LOG_LEVEL=info"
-      - "LOGBACK_LEVEL=info"
-      - "GUACAMOLE_HOME=/config/guacamole"
-
-    hostname: "eae0c6f416b5"
-
-    image: "jasonbean/guacamole"
-
-    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://i.imgur.com/eflpez4.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:8080]/"
-      version: "1.5.4"
-
-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
-
-    network_mode: "bridge"
-
-    ports:
-      - "7854:8080/tcp"
-
-    volumes:
-      - "/mnt/cache/appdata/ApacheGuacamole:/config"
-
-
@@ -1,7 +1,7 @@
 services:
  teslamate:
    container_name: "teslamate"
-    image: teslamate/teslamate:4.0.1
+    image: teslamate/teslamate:4.3.0
    restart: always
    network_mode: "bridge"
    environment:
@@ -44,7 +44,7 @@ services:

  grafana:
    container_name: "teslamate-grafana"
-    image: teslamate/grafana:4.0.1
+    image: teslamate/grafana:4.3.0
    restart: always
    network_mode: "bridge"
    environment:
@@ -97,8 +97,9 @@ services:
      - "CAR_MODEL=tesla:my:23:my_lfp:rwd"
      - "HOST_OS=Unraid"
      - "HOST_CONTAINERNAME=TeslaMate-ABRP"
+      - "MQTT_PASSWORD=${MQTT_PASSWORD}"

-    image: "fetzu/teslamate-abrp:3.4.3"
+    image: "fetzu/teslamate-abrp:4.0.1"

    labels:
      org.opencontainers.image.created: "2025-04-29T20:05:43.419Z"
@@ -116,7 +117,7 @@ services:
  teslamateapi:
    container_name: "teslamateapi"
    network_mode: "bridge"
-    image: tobiasehlert/teslamateapi:1.24.3
+    image: tobiasehlert/teslamateapi:1.25.0
    restart: always
    environment:
      - "ENCRYPTION_KEY=${ENCRYPTION_KEY}"
@@ -149,18 +150,15 @@ services:
      - pangolin.proxy-resources.teslamateapi.targets[0].healthcheck.port=4001
      - pangolin.proxy-resources.teslamateapi.targets[0].healthcheck.enabled=true
      - pangolin.proxy-resources.teslamateapi.auth.sso-enabled=false
-      - pangolin.proxy-resources.teslamateapi.rules[0].match=country
+      - pangolin.proxy-resources.teslamateapi.rules[0].match=region
      - pangolin.proxy-resources.teslamateapi.rules[0].action=allow
-      - pangolin.proxy-resources.teslamateapi.rules[0].value=NL
-      - pangolin.proxy-resources.teslamateapi.rules[1].match=country
+      - pangolin.proxy-resources.teslamateapi.rules[0].value=EU
+      - pangolin.proxy-resources.teslamateapi.rules[1].match=ip
      - pangolin.proxy-resources.teslamateapi.rules[1].action=allow
-      - pangolin.proxy-resources.teslamateapi.rules[1].value=DE
+      - pangolin.proxy-resources.teslamateapi.rules[1].value=172.21.0.1
      - pangolin.proxy-resources.teslamateapi.rules[2].match=ip
      - pangolin.proxy-resources.teslamateapi.rules[2].action=allow
-      - pangolin.proxy-resources.teslamateapi.rules[2].value=172.21.0.1
-      - pangolin.proxy-resources.teslamateapi.rules[3].match=ip
-      - pangolin.proxy-resources.teslamateapi.rules[3].action=allow
-      - pangolin.proxy-resources.teslamateapi.rules[3].value=212.227.105.183
-      - pangolin.proxy-resources.teslamateapi.rules[4].match=country
-      - pangolin.proxy-resources.teslamateapi.rules[4].action=deny
-      - pangolin.proxy-resources.teslamateapi.rules[4].value=ALL
+      - pangolin.proxy-resources.teslamateapi.rules[2].value=212.227.105.183
+      - pangolin.proxy-resources.teslamateapi.rules[3].match=country
+      - pangolin.proxy-resources.teslamateapi.rules[3].action=deny
+      - pangolin.proxy-resources.teslamateapi.rules[3].value=ALL
@@ -6,34 +6,20 @@ services:
      - "/usr/src/cloudcmd/bin/cloudcmd.js"
    environment:
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=CloudCommander"
-      - "HOME=/root"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "NODE_VERSION=25.9.0"
-      - "YARN_VERSION=1.22.22"
      - "cloudcmd_terminal=true"
      - "cloudcmd_terminal_path=gritty"
      - "cloudcmd_open=false"
-    hostname: "17f9cb27a482"
-    image: "coderaiser/cloudcmd"
+    image: "coderaiser/cloudcmd:19.21.1"
    ipc: "private"
-    labels:
-      maintainer: "Coderaiser"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/cheesemarathon/docker-templates/master/images/cloudcmdLogo.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:8000]"
-      org.opencontainers.image.source: "https://github.com/coderaiser/cloudcmd"
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-    mac_address: "fa:89:cf:1f:9b:d9"
    network_mode: "bridge"
    ports:
      - "8765:8000/tcp"
+    restart: "unless-stopped"
    user: "99:100"
    volumes:
      - "/mnt/user/appdata/cloudcmd:/root"
@@ -42,94 +28,50 @@ services:


  FileFlows:
-
    container_name: "FileFlows"
-
    devices:
      - "/dev/dri:/dev/dri"
-
    entrypoint:
      - "/app/docker-entrypoint.sh"
-
    environment:
-      - "HOST_HOSTNAME=Atlas"
      - "PUID=99"
-      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "NVIDIA_VISIBLE_DEVICES=all"
-      - "CA_TS_FALLBACK_DIR=/app/Data"
-      - "HOST_CONTAINERNAME=FileFlows"
      - "PGID=100"
-      - "PATH=/dotnet:/dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "DOTNET_ROOT=/dotnet"
+      - "TZ=Europe/Berlin"
+      - "NVIDIA_VISIBLE_DEVICES=all"
      - "NVIDIA_DRIVER_CAPABILITIES=compute,video,utility"
+      - "CA_TS_FALLBACK_DIR=/app/Data"
      - "DOTNET_CLI_TELEMETRY_OPTOUT=true"
-
-    hostname: "b1fc73bf540c"
-
-    image: "revenz/fileflows:stable"
-
+    image: "revenz/fileflows:26.09"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/revenz/FileFlowsUnraid/master/icon.png?raw=true"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:5000]"
-      org.opencontainers.image.version: "24.04"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "46:3c:12:f3:6d:4c"
-
    network_mode: "bridge"
-
    ports:
      - "8581:5000/tcp"
-
    restart: "unless-stopped"
-
    volumes:
      - "/mnt/cache/temp/fileflows:/temp"
      - "/mnt/user/appdata/fileflows/data:/app/Data"
      - "/mnt/user/appdata/fileflows/logs:/app/Logs"
      - "/mnt/user:/media"
-
    working_dir: "/app"


  QDirStat:
-
-    command:
-      - "/init"
-
    container_name: "QDirStat"
-
    environment:
-      - "HOST_OS=Unraid"
      - "USER_ID=99"
+      - "GROUP_ID=100"
      - "UMASK=000"
      - "X11VNC_EXTRA_OPTS="
      - "TZ=Europe/Berlin"
-      - "HOST_CONTAINERNAME=QDirStat"
-      - "GROUP_ID=100"
      - "APP_NICENESS="
      - "DISPLAY_WIDTH=1920"
      - "DISPLAY_HEIGHT=1080"
      - "SECURE_CONNECTION=0"
-      - "HOST_HOSTNAME=Atlas"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/base/sbin:/opt/base/bin"
-      - "ENV=/root/.docker_rc"
-      - "SUP_GROUP_IDS="
-      - "LANG=en_US.UTF-8"
-      - "KEEP_APP_RUNNING=0"
-      - "INSTALL_PACKAGES="
-      - "PACKAGES_MIRROR="
-      - "CONTAINER_DEBUG=0"
-      - "DARK_MODE=0"
      - "SECURE_CONNECTION_VNC_METHOD=SSL"
      - "SECURE_CONNECTION_CERTS_CHECK_INTERVAL=60"
      - "WEB_LOCALHOST_ONLY=0"
@@ -140,92 +82,43 @@ services:
      - "ENABLE_CJK_FONT=0"
      - "WEB_AUDIO=0"
      - "WEB_AUTHENTICATION=0"
-      - "WEB_AUTHENTICATION_TOKEN_VALIDITY_TIME=24"
-      - "WEB_AUTHENTICATION_USERNAME="
-      - "WEB_AUTHENTICATION_PASSWORD="
-      - "WEB_FILE_MANAGER=0"
-      - "WEB_FILE_MANAGER_ALLOWED_PATHS=AUTO"
-      - "WEB_FILE_MANAGER_DENIED_PATHS="
-      - "WEB_NOTIFICATION=0"
-      - "WEB_TERMINAL=0"
-
-    hostname: "8cc106eb9ddc"
-
-    image: "jlesage/qdirstat"
-
+      - "SUP_GROUP_IDS="
+      - "KEEP_APP_RUNNING=0"
+    image: "jlesage/qdirstat:v26.09.1"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/jlesage/docker-templates/master/jlesage/images/qdirstat-icon.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:5800]"
-      org.label-schema.description: "Docker container for QDirStat"
-      org.label-schema.name: "qdirstat"
-      org.label-schema.schema-version: "1.0"
-      org.label-schema.vcs-url: "https://github.com/jlesage/docker-qdirstat"
-      org.label-schema.version: "26.03.1"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
    network_mode: "bridge"
-
    ports:
      - "7815:5800/tcp"
      - "7915:5900/tcp"
-
+    restart: "unless-stopped"
    volumes:
      - "/mnt/user/appdata/QDirStat:/config"
      - "/mnt/user:/storage"
      - "/mnt:/unraid"
-
    working_dir: "/tmp"


  StirlingPDF:
-
    container_name: "StirlingPDF"
-
    entrypoint:
      - "tini"
      - "--"
      - "/scripts/init.sh"
-
    environment:
      - "DOCKER_ENABLE_SECURITY=false"
      - "SYSTEM_ROOT_URI_PATH=/"
-      - "HOST_OS=Unraid"
-      - "HOST_CONTAINERNAME=StirlingPDF"
      - "SYSTEM_GOOGLEVISIBILITY=false"
      - "SYSTEM_DEFAULT_LOCALE=nl_NL"
      - "METRICS_ENABLED=true"
      - "SYSTEM_CONNECTIONTIMEOUTMINUTES=3000000"
      - "CA_TS_FALLBACK_DIR=/usr/share/tesseract-ocr/5/tessdata"
-      - "TZ=Europe/Berlin"
-      - "HOST_HOSTNAME=Atlas"
-      - "PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "JAVA_HOME=/opt/java/openjdk"
-      - "LANG=C.UTF-8"
-      - "LANGUAGE=en_US:en"
-      - "LC_ALL=C.UTF-8"
-      - "JAVA_VERSION=jdk-25.0.2+10"
-      - "DEBIAN_FRONTEND=noninteractive"
      - "TESS_BASE_PATH=/usr/share/tesseract-ocr/5/tessdata"
-      - "VERSION_TAG=2.10.1"
-      - "STIRLING_AOT_ENABLE=false"
-      - "STIRLING_JVM_PROFILE=balanced"
-      - "_JVM_OPTS_BALANCED=-XX:+ExitOnOutOfMemoryError -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/configs/heap_dumps\
-        \ -XX:+UseG1GC -XX:MaxGCPauseMillis=200 -XX:G1HeapRegionSize=4m -XX:G1PeriodicGCInterval=60000\
-        \ -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -XX:+ExplicitGCInvokesConcurrent -Dspring.threads.virtual.enabled=true\
-        \ -Djava.awt.headless=true"
-      - "_JVM_OPTS_PERFORMANCE=-XX:+ExitOnOutOfMemoryError -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/configs/heap_dumps\
-        \ -XX:+UseShenandoahGC -XX:ShenandoahGCMode=generational -XX:+UseCompactObjectHeaders -XX:+UseStringDeduplication\
-        \ -XX:+AlwaysPreTouch -XX:+ExplicitGCInvokesConcurrent -Dspring.threads.virtual.enabled=true -Djava.awt.headless=true"
-      - "JAVA_CUSTOM_OPTS="
-      - "HOME=/home/stirlingpdfuser"
+      - "TZ=Europe/Berlin"
      - "PUID=1000"
      - "PGID=1000"
      - "UMASK=022"
@@ -233,461 +126,176 @@ services:
      - "TMPDIR=/tmp/stirling-pdf"
      - "TEMP=/tmp/stirling-pdf"
      - "TMP=/tmp/stirling-pdf"
-      - "DBUS_SESSION_BUS_ADDRESS=/dev/null"
-      - "SAL_TMP=/tmp/stirling-pdf/libre"
-
-    hostname: "207c7ea0328e"
-
-    image: "frooodle/s-pdf:latest"
-
+    image: "frooodle/s-pdf:3.0.2"
    ipc: "private"
-
-    labels:
-      maintainer: "Stirling-Tools"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/Frooodle/Stirling-PDF/main/src/main/resources/static/favicon.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:8080]"
-      org.opencontainers.image.authors: "Stirling-Tools"
-      org.opencontainers.image.created: "2026-05-07T20:52:44.133Z"
-      org.opencontainers.image.description: "#1 PDF Application on GitHub that lets you edit PDFs on any\
-        \ device anywhere"
-      org.opencontainers.image.documentation: "https://docs.stirlingpdf.com"
-      org.opencontainers.image.keywords: "PDF, manipulation, API, Spring Boot, React"
-      org.opencontainers.image.licenses: "NOASSERTION"
-      org.opencontainers.image.ref.name: "ubuntu"
-      org.opencontainers.image.revision: "270af912d44baf1ea3264507bff5256b8dccb964"
-      org.opencontainers.image.source: "https://github.com/Stirling-Tools/Stirling-PDF"
-      org.opencontainers.image.title: "Stirling-PDF"
-      org.opencontainers.image.url: "https://github.com/Stirling-Tools/Stirling-PDF"
-      org.opencontainers.image.vendor: "Stirling-Tools"
-      org.opencontainers.image.version: "2.10.1"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "42:1b:a3:7a:06:fb"
-
    network_mode: "bridge"
-
    ports:
      - "8876:8080/tcp"
-
+    restart: "unless-stopped"
    volumes:
      - "/mnt/cache/appdata/Stirling-PDF/OCR:/usr/share/tesseract-ocr/5/tessdata"
      - "/mnt/cache/appdata/Stirling-PDF/configs:/configs"
      - "/mnt/cache/appdata/Stirling-PDF/customFiles:/customFiles"
-
    working_dir: "/app"


  binhex-krusader:
-
+    container_name: "binhex-krusader"
    command:
      - "/bin/bash"
-      - "/usr/local/bin/init.sh"
-
-    container_name: "binhex-krusader"
-
+      - "/usr/bin/init.sh"
    entrypoint:
      - "/usr/bin/dumb-init"
      - "--"
-
    environment:
      - "PGID=100"
-      - "HOST_HOSTNAME=Atlas"
      - "HTTPS_CERT_PATH="
      - "HEALTHCHECK_COMMAND="
      - "ENABLE_STARTUP_SCRIPTS=no"
      - "HEALTHCHECK_ACTION="
      - "UMASK=000"
      - "TZ=Europe/Berlin"
-      - "HOST_CONTAINERNAME=binhex-krusader"
      - "VNC_PASSWORD="
      - "WEBPAGE_TITLE=Krusader"
      - "WEBUI_PORT=6080"
      - "PUID=99"
-      - "HOST_OS=Unraid"
-      - "HTTPS_KEY_PATH="
      - "TEMP_FOLDER=/config/home/.config/krusader/tmp"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
      - "HOME=/home/nobody"
      - "TERM=xterm"
      - "LANG=en_GB.UTF-8"
-
-    hostname: "9fb60df4253a"
-
-    image: "ghcr.io/binhex/arch-krusader"
-
+    image: "ghcr.io/binhex/arch-krusader:2.9.0-2-01"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/binhex/docker-templates/master/binhex/images/krusader-icon.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "https://[IP]:[PORT:6080]/vnc.html?resize=remote&host=[IP]&port=[PORT:6080]&autoconnect=1"
-      org.opencontainers.image.authors: "binhex"
-      org.opencontainers.image.source: "https://github.com/binhex/arch-krusader"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "fe:ea:1e:43:cd:2c"
-
    network_mode: "bridge"
-
    ports:
      - "5900:5900/tcp"
      - "6080:6080/tcp"
-
    privileged: true
-
    restart: "always"
-
    security_opt:
      - "label=disable"
-
    volumes:
      - "/mnt/cache/appdata/binhex-krusader:/config"
      - "/mnt/user:/media"
-
    working_dir: "/"


  dockersocket:
-
+    container_name: "dockersocket"
+    entrypoint:
+      - "docker-entrypoint.sh"
    command:
      - "haproxy"
      - "-f"
      - "/tmp/haproxy.cfg"
-
-    container_name: "dockersocket"
-
-    entrypoint:
-      - "docker-entrypoint.sh"
-
    environment:
      - "POST=0"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=dockersocket"
      - "CONTAINERS=1"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "HAPROXY_VERSION=3.2.4"
-      - "HAPROXY_URL=https://www.haproxy.org/download/3.2/src/haproxy-3.2.4.tar.gz"
-      - "HAPROXY_SHA256=5d4b2ee6fe56b8098ebb9c91a899d728f87d64cd7be8804d2ddcc5f937498c1d"
      - "ALLOW_RESTARTS=0"
      - "ALLOW_STOP=0"
      - "ALLOW_START=0"
      - "AUTH=0"
-      - "BUILD=0"
-      - "COMMIT=0"
-      - "CONFIGS=0"
-      - "DISABLE_IPV6=0"
-      - "DISTRIBUTION=0"
      - "EVENTS=1"
      - "EXEC=0"
-      - "GRPC=0"
-      - "IMAGES=0"
      - "INFO=0"
      - "LOG_LEVEL=info"
-      - "NETWORKS=0"
-      - "NODES=0"
      - "PING=1"
-      - "PLUGINS=0"
      - "SECRETS=0"
-      - "SERVICES=0"
-      - "SESSION=0"
      - "SOCKET_PATH=/var/run/docker.sock"
-      - "SWARM=0"
-      - "SYSTEM=0"
-      - "TASKS=0"
      - "VERSION=1"
-      - "VOLUMES=0"
-
-    expose:
-      - "2375/tcp"
-
-    hostname: "610f7b354839"
-
-    image: "ghcr.io/tecnativa/docker-socket-proxy:latest"
-
+    image: "ghcr.io/tecnativa/docker-socket-proxy:v0.5.0"
    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/ibracorp/app-logos/main/docker/docker-logo.png"
-      net.unraid.docker.managed: "dockerman"
-      org.opencontainers.image.created: "2025-12-16T07:26:21.623Z"
-      org.opencontainers.image.description: "Proxy over your Docker socket to restrict which requests\
-        \ it accepts"
-      org.opencontainers.image.licenses: "Apache-2.0"
-      org.opencontainers.image.revision: "2f04313b042c1bf4dfbd039475dfc42db79bde7a"
-      org.opencontainers.image.source: "https://github.com/Tecnativa/docker-socket-proxy"
-      org.opencontainers.image.title: "docker-socket-proxy"
-      org.opencontainers.image.url: "https://github.com/Tecnativa/docker-socket-proxy"
-      org.opencontainers.image.version: "v0.4.2"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
-    mac_address: "32:92:26:ec:1d:c6"
-
    network_mode: "bridge"
-
    restart: "unless-stopped"
-
    user: "root"
-
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
-
    working_dir: "/var/lib/haproxy"


  duplicati:
-
    container_name: "duplicati"
-
    entrypoint:
      - "/init"
-
    environment:
      - "PUID=99"
      - "PGID=100"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=duplicati"
-      - "PATH=/lsiopy/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "HOME=/config"
-      - "LANGUAGE=en_US.UTF-8"
-      - "LANG=en_US.UTF-8"
-      - "TERM=xterm"
-      - "S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0"
-      - "S6_VERBOSITY=1"
-      - "S6_STAGE2_HOOK=/docker-mods"
-      - "VIRTUAL_ENV=/lsiopy"
-      - "LSIO_FIRST_PARTY=true"
      - "TMPDIR=/run/duplicati-temp"
      - "DUPLICATI__REQUIRE_DB_ENCRYPTION_KEY=true"
      - "DUPLICATI__SERVER_DATAFOLDER=/config"
      - "DUPLICATI__WEBSERVICE_PORT=8200"
      - "DUPLICATI__WEBSERVICE_INTERFACE=any"
      - "DUPLICATI__WEBSERVICE_ALLOWED_HOSTNAMES=*"
-
-    hostname: "ed602e3f7bd0"
-
-    image: "linuxserver/duplicati"
-
+    image: "linuxserver/duplicati:v2.4.0.0_stable_2026-09-03-ls310"
    ipc: "private"
-
-    labels:
-      build_version: "Linuxserver.io version:- v2.3.0.1_stable_2026-04-24-ls292 Build-date:- 2026-05-09T06:11:50+00:00"
-      maintainer: "aptalca"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/duplicati-icon.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:8200]/"
-      org.opencontainers.image.authors: "linuxserver.io"
-      org.opencontainers.image.created: "2026-05-09T06:11:50+00:00"
-      org.opencontainers.image.description: "[Duplicati](https://www.duplicati.com/) is a backup client\
-        \ that securely stores encrypted, incremental, compressed backups on local storage, cloud storage\
-        \ services and remote file servers. It works with standard protocols like FTP, SSH, WebDAV as\
-        \ well as popular services like Microsoft OneDrive, Amazon S3, Google Drive, box.com, Mega, B2,\
-        \ and many others."
-      org.opencontainers.image.documentation: "https://docs.linuxserver.io/images/docker-duplicati"
-      org.opencontainers.image.licenses: "GPL-3.0-only"
-      org.opencontainers.image.ref.name: "a10c0781b5cfccb18596e1ca28c87efd6675de16"
-      org.opencontainers.image.revision: "a10c0781b5cfccb18596e1ca28c87efd6675de16"
-      org.opencontainers.image.source: "https://github.com/linuxserver/docker-duplicati"
-      org.opencontainers.image.title: "Duplicati"
-      org.opencontainers.image.url: "https://github.com/linuxserver/docker-duplicati/packages"
-      org.opencontainers.image.vendor: "linuxserver.io"
-      org.opencontainers.image.version: "v2.3.0.1_stable_2026-04-24-ls292"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
    network_mode: "bridge"
-
    ports:
      - "8200:8200/tcp"
-
+    restart: "unless-stopped"
    volumes:
      - "/mnt/cache/duplicatitmp:/tmp"
      - "/mnt/user/Backups:/backups"
      - "/mnt/user/Backups:/source"
      - "/mnt/user/appdata/duplicati:/config"
      - "/mnt/user:/unraid"
-
    working_dir: "/"


-  firefox:
-
-    container_name: "firefox"
-
+  chrome:
+    container_name: "chrome"
    entrypoint:
      - "/init"
-
    environment:
-      - "HOST_HOSTNAME=Atlas"
-      - "HOST_CONTAINERNAME=firefox"
-      - "FIREFOX_CLI=https://www.linuxserver.io/"
      - "PUID=99"
      - "PGID=100"
      - "UMASK=022"
      - "TZ=Europe/Berlin"
-      - "HOST_OS=Unraid"
-      - "PATH=/lsiopy/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "HOME=/config"
-      - "LANGUAGE=en_US.UTF-8"
-      - "LANG=en_US.UTF-8"
-      - "TERM=xterm"
-      - "S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0"
-      - "S6_VERBOSITY=1"
-      - "S6_STAGE2_HOOK=/docker-mods"
-      - "VIRTUAL_ENV=/lsiopy"
-      - "DISPLAY=:1"
-      - "PERL5LIB=/usr/local/bin"
+      - "CHROME_CLI=https://www.linuxserver.io/"
+      - "TITLE=Chrome"
      - "START_DOCKER=true"
+      - "DISPLAY=:1"
      - "PULSE_RUNTIME_PATH=/defaults"
-      - "SELKIES_INTERPOSER=/usr/lib/selkies_joystick_interposer.so"
-      - "NVIDIA_DRIVER_CAPABILITIES=all"
-      - "DISABLE_ZINK=false"
-      - "DISABLE_DRI3=false"
      - "SELKIES_ENCODER=x264enc,jpeg"
-      - "TITLE=Firefox"
-      - "LSIO_FIRST_PARTY=true"
+      - "SELKIES_ENABLE_BASIC_AUTH=false"
+      - "SELKIES_ALLOWED_ORIGINS=*"
+      - "SELKIES_VIDEO_STREAMING_MODE=false"
      - "NO_GAMEPAD=true"
      - "PIXELFLUX_WAYLAND=true"
-
-    hostname: "32b51d041274"
-
-    image: "lscr.io/linuxserver/firefox"
-
+      - "DISABLE_DRI3=false"
+      - "DISABLE_ZINK=false"
+    image: "lscr.io/linuxserver/chrome:154.0.8037.97-1-ls127"
    ipc: "private"
-
-    labels:
-      build_version: "Linuxserver.io version:- 1150.0.1build1-1xtradeb1.2404.1-ls86 Build-date:- 2026-05-06T22:51:35+00:00"
-      maintainer: "thelamer"
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/firefox-logo.png"
-      net.unraid.docker.managed: "dockerman"
-      net.unraid.docker.webui: "http://[IP]:[PORT:3000]"
-      org.opencontainers.image.authors: "linuxserver.io"
-      org.opencontainers.image.created: "2026-05-06T22:51:35+00:00"
-      org.opencontainers.image.description: "[Firefox](https://www.mozilla.org/en-US/firefox/) Browser,\
-        \ also known as Mozilla Firefox or simply Firefox, is a free and open-source web browser developed\
-        \ by the Mozilla Foundation and its subsidiary, the Mozilla Corporation. Firefox uses the Gecko\
-        \ layout engine to render web pages, which implements current and anticipated web standards."
-      org.opencontainers.image.documentation: "https://docs.linuxserver.io/images/docker-firefox"
-      org.opencontainers.image.licenses: "GPL-3.0-only"
-      org.opencontainers.image.ref.name: "1aed7c1b4a11610517a6a467e4891298687cef1f"
-      org.opencontainers.image.revision: "1aed7c1b4a11610517a6a467e4891298687cef1f"
-      org.opencontainers.image.source: "https://github.com/linuxserver/docker-firefox"
-      org.opencontainers.image.title: "Firefox"
-      org.opencontainers.image.url: "https://github.com/linuxserver/docker-firefox/packages"
-      org.opencontainers.image.vendor: "linuxserver.io"
-      org.opencontainers.image.version: "1150.0.1build1-1xtradeb1.2404.1-ls86"
-
    logging:
      driver: "json-file"
      options:
        max-file: "1"
        max-size: "50m"
-
    network_mode: "bridge"
-
    ports:
-      - "3086:3000/tcp"
-      - "3087:3001/tcp"
-
+      - "3033:3000/tcp"
+      - "3034:3001/tcp"
+    restart: "unless-stopped"
    volumes:
-      - "/mnt/cache/appdata/firefox:/config"
-
-    working_dir: "/"
-
-
-  macinabox:
-
-    container_name: "macinabox"
-
-    entrypoint:
-      - "/app/letsgo.sh"
-
-    environment:
-      - "HOST_OS=Unraid"
-      - "HOST_CONTAINERNAME=macinabox"
-      - "CUSTOMNAME="
-      - "overridenic=virtio-net"
-      - "replaceopencore=no"
-      - "CPUARGS=Skylake-Server,vendor=GenuineIntel,+hypervisor,+invtsc,kvm=on,+fma,+avx,+avx2,+aes,+ssse3,+sse4_2,+popcnt,+sse4a,+bmi1,+bmi2"
-      - "TZ=Europe/Berlin"
-      - "HOST_HOSTNAME=Atlas"
-      - "OKTORUN=YES"
-      - "flavour=Sequoia"
-      - "vdisktype=qcow2"
-      - "vdisksize=100G"
-      - "WHATVERSION=5"
-      - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-      - "DEBIAN_FRONTEND=noninteractive"
-      - "SLEEPTIME=60"
-
-    hostname: "fe41e7b9cc68"
-
-    image: "spaceinvaderone/macinabox:latest"
-
-    ipc: "private"
-
-    labels:
-      net.unraid.docker.icon: "https://raw.githubusercontent.com/SpaceinvaderOne/Docker-Templates-Unraid/master/spaceinvaderone/docker_icons/Macinabox.png"
-      net.unraid.docker.managed: "dockerman"
-      org.opencontainers.image.ref.name: "ubuntu"
-      org.opencontainers.image.version: "20.04"
-
-    logging:
-      driver: "json-file"
-      options:
-        max-file: "1"
-        max-size: "50m"
-
-    network_mode: "bridge"
-
-    privileged: true
-
-    security_opt:
-      - "label=disable"
-
-    volumes:
-      - "/boot/config/domain.cfg:/vm/domain.cfg"
-      - "/boot/config/plugins/dynamix:/host/boot/config/plugins/dynamix"
-      - "/etc/libvirt/qemu/nvram:/etc/libvirt/qemu/nvram"
-      - "/lib64:/host/lib64"
-      - "/lib:/host/lib"
-      - "/mnt/cache/appdata/macinabox:/config"
-      - "/mnt/user/domains:/domains"
-      - "/mnt/user/isos:/isos"
-      - "/tmp/notifications:/host/tmp/notifications"
-      - "/usr/bin:/host/usr/bin"
-      - "/usr/lib64:/host/usr/lib64"
-      - "/usr/lib:/host/usr/lib"
-      - "/usr/local/emhttp/plugins/dynamix.vm.manager/templates/images:/icons"
-      - "/usr/local/emhttp/plugins/dynamix.vm.manager/templates/images:/unraid_vm_icons"
-      - "/usr/local/emhttp/webGui/include:/host/usr/local/emhttp/webGui/include"
-      - "/usr/local/emhttp/webGui/scripts:/host/usr/local/emhttp/webGui/scripts"
-      - "/var/run/docker.sock:/var/run/docker.sock"
-      - "/var/run/libvirt:/var/run/libvirt"
-
-    working_dir: "/app"
-
-
+      - "/mnt/cache/appdata/chrome:/config"
+    working_dir: "/"
@@ -0,0 +1,55 @@
+services:
+  vaults3:
+    image: eniz1806/vaults3:4.4.77
+    container_name: vaults3
+    network_mode: bridge
+    labels:
+      - traefik.http.routers.vaults3.rule=Host(`s3.arnoutvw.nl`)
+      - pangolin.proxy-resources.vaults3.name=vaults3
+      - pangolin.proxy-resources.vaults3.full-domain=s3.arnoutvw.nl
+      - pangolin.proxy-resources.vaults3.protocol=http
+      - pangolin.proxy-resources.vaults3.ssl=true
+      - pangolin.proxy-resources.vaults3.targets[0].method=http
+      - pangolin.proxy-resources.vaults3.targets[0].hostname=192.168.10.144
+      - pangolin.proxy-resources.vaults3.targets[0].port=9010
+      - pangolin.proxy-resources.vaults3.targets[0].healthcheck.hostname=192.168.10.144
+      - pangolin.proxy-resources.vaults3.targets[0].healthcheck.port=9010
+      - pangolin.proxy-resources.vaults3.targets[0].healthcheck.enabled=true
+      - pangolin.proxy-resources.vaults3.auth.sso-enabled=false
+      - pangolin.proxy-resources.vaults3.rules[0].match=region
+      - pangolin.proxy-resources.vaults3.rules[0].action=allow
+      - pangolin.proxy-resources.vaults3.rules[0].value=EU
+      - pangolin.proxy-resources.vaults3.rules[1].match=ip
+      - pangolin.proxy-resources.vaults3.rules[1].action=allow
+      - pangolin.proxy-resources.vaults3.rules[1].value=172.21.0.1
+      - pangolin.proxy-resources.vaults3.rules[2].match=country
+      - pangolin.proxy-resources.vaults3.rules[2].action=deny
+      - pangolin.proxy-resources.vaults3.rules[2].value=ALL
+    ports:
+      - "9010:9000/tcp"
+    environment:
+      VAULTS3_ACCESS_KEY: ${VAULTS3_ACCESS_KEY}
+      VAULTS3_SECRET_KEY: ${VAULTS3_SECRET_KEY}
+      VAULTS3_ENCRYPTION_KEY: ${VAULTS3_ENCRYPTION_KEY}
+      VAULTS3_PORT: 9000
+      VAULTS3_ADDRESS: 0.0.0.0
+      VAULTS3_DATA_DIR: /data
+      VAULTS3_METADATA_DIR: /metadata
+      VAULTS3_LOG_LEVEL: info
+      VAULTS3_DOMAIN: s3.arnoutvw.nl
+    volumes:
+      - /mnt/user/appdata/vaults3/data:/data
+      - /mnt/user/appdata/vaults3/metadata:/metadata
+      - /mnt/user/appdata/vaults3/config:/etc/vaults3
+    restart: unless-stopped
+    healthcheck:
+      test: [ "CMD", "wget", "-qO-", "http://localhost:9000/health" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    logging:
+      driver: json-file
+      options:
+        max-size: 50m
+        max-file: "1"